ci: pin GitHub Actions to SHA digests (fix zizmor unpinned-uses)#51

lhoupert wants to merge 1 commit intomaindevelopmentseed/eoapi-risk:mainfrom

fix/pin-github-actionsdevelopmentseed/eoapi-risk:fix/pin-github-actionsCopy head branch name to clipboard