chore: pin GitHub Actions to full-length commit SHAs

[joshuarli]

Summary

• Pin all GitHub Actions references in .github/ workflow files to full-length commit SHAs

Generated by devenv pin_gha.

🤖 Generated with Claude Code

[github-actions]

Semver Impact of This PR

🟢 Patch (bug fixes)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

---

Internal Changes 🔧

Release

• Fix changelog-preview permissions by BYK in #302
• Bump Craft version to fix issues by BYK in #299
• Switch from action-prepare-release to Craft by BYK in #298

Other

• (deps) Bump minimatch from 3.1.2 to 3.1.5 by dependabot in #308

• Pin GitHub Actions to full-length commit SHAs by joshuarli in #310

• Set docker tag for master [skip ci] by getsantry[bot] in f988b254
• Use pull_request_target for changelog preview by BYK in #301
• Add unlabeled trigger to changelog-preview by BYK in #300
• Set docker tag for master [skip ci] by getsantry[bot] in 8873fc25
• Set docker tag for master [skip ci] by getsantry[bot] in c7b892f7

---

_{🤖 This preview updates automatically when you update the PR.}