Pin Dependencies for Improved Security and Stability

[Tatsinnit]

Description:

This PR updates our GitHub Actions workflow by pinning dependencies to specific commit SHAs, ensuring enhanced security, reliability, and consistency across builds.

Changes Included:

• Pinned for example actions/setup-python@v5 to its SHA (0b93645) to prevent unexpected updates.
• Ensured all GitHub Actions dependencies are using SHA references instead of floating tags.

Why This Matters:

• Security – Prevents supply chain attacks by ensuring that only the verified version of an action runs.
• Stability – Guarantees that workflows are consistent across runs, avoiding unexpected behavior from upstream changes.
• Performance – Helps maintain reproducible builds by locking dependencies to known-good versions.

Thanks

[ReinierCC]

SHA changes look good.

Might be useful to create a reference doc on how to find the SHAs to incorporate into other repos.