ci: pin action versions

12 jobs for development in 15 seconds (queued for 9 seconds)