Pin GitHub Actions dependencies by commit hash.