[3.12] gh-146488: hash-pin all action references (gh-146489) (#147980)

This is like #146489, but recreated for 3.12 because of CI drift.

Signed-off-by: William Woodruff <william@yossarian.net>