chore: use commit SHA for gh actions version

[Caele]

Motivation

Requirements checklist

• Api specification
  • Ran yarn spec
    • No changes OR API changes has been formally approved
• Unit/Component test coverage
• Correct PR title for the changes (fix, chore, feat)

When build and tests have passed:

• Add code reviewers, for example @qlik-oss/nebula-core

[enell]

Add pin version to renovate config

"github-actions": {
  "enabled": true,
  "rangeStrategy": "pin"
}