Hash-pin all actions, apply other fixes from zizmor#829

woodruffw wants to merge 5 commits intoRustCrypto:masterRustCrypto/hashes:masterfrom

woodruffw-forks:ww/ciwoodruffw-forks/hashes:ww/ciCopy head branch name to clipboard