Pin release.yml actions to SHAs on node24

Pin actions/checkout (v6.0.1) and softprops/action-gh-release (v3.0.1) to
commit SHAs, matching the pinning convention in validate.yml/lint.yml and
clearing the Node 20 deprecation warning.

Author: bkanuka

.github/workflows/release.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Compute version from tag
         id: ver
@@ -31,7 +31,7 @@ jobs:
         run: ls -lah dist
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
         with:
           generate_release_notes: true
           files: dist/ha-run-chicken.zip