Unpinned action warning workflow

[tleopold]

Produce a GitHub Action that lints workflows to warn if you include unpinned actions.

[Elfo404]

looks like there's a PR in actionlint that tackles exactly this