ci: pin actions by hash and use corepack

[danielroe]

🔗 Linked issue

#21322

❓ Type of change

• 📖 Documentation (updates to the documentation, readme or JSdoc annotations)
• 🐞 Bug fix (a non-breaking change that fixes an issue)
• 👌 Enhancement (improving an existing functionality like performance)
• ✨ New feature (a non-breaking change that adds functionality)
• 🧹 Chore (updates to the build process or auxiliary tools and libraries)
• ⚠️ Breaking change (fix or feature that would cause existing functionality to change)

📚 Description

This pins actions to their commit hash and also updates workflows to use corepack and builtin node_modules cache.

📝 Checklist

• I have linked an issue or discussion.
• I have updated the documentation accordingly.