chore(ci): AUT-1135 pin GitHub Actions to commit SHAs

[svcnemo-autobot]

Background

Tagged GitHub Action references are mutable.

What changed

• Pin external actions to equivalent full commit SHAs.
• Retain each source tag or branch in an inline comment.

Details

flowchart LR
    T[Tag or branch] --> C[Resolved commit]
    C --> W[Pinned workflow]

Loading

Updated references under .github.

Tested

• Parsed every changed YAML file.
• No new actionlint diagnostics versus upstream.
• check-yaml; git diff --check.

[svcnemo-autobot]

/ok to test 0231431

[github-actions]

[🤖]: Hi @svcnemo-autobot 👋,

We wanted to let you know that a CICD pipeline for this PR just finished successfully.

So it might be time to merge this PR or get some approvals.

[svcnemo-autobot]

CI triage: release-summary only aggregates release / finalize / build-docs / Build docs. The docs gate retried linkcheck three times and consistently failed solely because https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=8462081 returned HTTP 418. This action-pin PR does not modify docs, and requested CI retries did not start a new attempt, so no unrelated docs suppression was added.