pin workflow action versions to sha hash, tighten permissions#499

chuckadams wants to merge 6 commits into

release_1.4.1fairpm/fair-plugin:release_1.4.1from

github_action_herofairpm/fair-plugin:github_action_heroCopy head branch name to clipboard