Bump GH Actions to latest version with SHA-pinned versioning

[thelovekesh]

Summary

• Update @dependabot config to update composite GH Actions.
• Bump GH actions to the latest version.
• Update GH Actions versioning strategy to SHA based. This is also supported by @dependabot - https://github.blog/changelog/2022-10-31-dependabot-now-updates-comments-in-github-actions-workflows-referencing-action-versions/

Checklist

• My code is tested and passes existing tests.
• My code follows the Engineering Guidelines (updates are often made to the guidelines, check it out periodically).

[github-actions]

Plugin builds for 3d6318b are ready 🛎️!

• Download development build
• Download production build

Checksums

# Development build checksums
f86e96b29ab31c60e83bb40eb86621ca89de0e2e6589ecc543a892d91c269385 *amp.zip

# Production build checksums
ba4d08483b935dc9981d687018fc7222c32b52a4e2cd6f41f6acab866a4c4655 *amp.zip

Warning

These builds are for testing purposes only and should not be used in production.

[westonruter]

😊

[thelovekesh]

All workflows are being resolved as expected by SHA. QA Passed ✅