[ci] harden GitHub Actions: SHA-pin all uses + dependabot#248

haileyok merged 2 commits into

mainroostorg/osprey:mainfrom

harden-workflow-actionsroostorg/osprey:harden-workflow-actionsCopy head branch name to clipboard