.github/workflows: pin GitHub action versions

Pin versions of GitHub actions that are used in our workflows.

Updates #cleanup

Signed-off-by: Mario Minardi <mario@tailscale.com>