ci: pin GitHub Actions to SHA digests (fix zizmor unpinned-uses)#295

lhoupert wants to merge 1 commit intomaindevelopmentseed/async-tiff:mainfrom

fix/pin-github-actionsdevelopmentseed/async-tiff:fix/pin-github-actionsCopy head branch name to clipboard