Pin dependencies in github actions with a hash

This should fix alerts such as
https://github.com/liblouis/liblouis/security/code-scanning/11
9 files changed