Update and pin actions #50
Description
Having unpinned actions makes zizmor sad (since a few versions back)
Dependabot can be used to update actions as well: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot