chore: pin github actions #960

re use github actions with pinning to tags.

we still want to keep them at tags, but should pin exactly used git commit hashes - to prevent unexpected changes.

is should be doen in a way, that dependabot can detect upstream changes and propose changes via pullrequests