Harden CI: SHA-pin all actions, add persist-credentials: false#2

jpr5 merged 1 commit into

mainCopilotKit/A2UI:mainfrom

fix/ci-hardeningCopilotKit/A2UI:fix/ci-hardeningCopy head branch name to clipboard