[StepSecurity] ci: Harden GitHub Actions

.github/workflows/build.yml

@@ -18,7 +18,7 @@ jobs:
         target: ["apk --debug", "appbundle --debug", "ios --no-codesign", macos, web]
     steps:
       - name: Set up JDK 11
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@d854b6da19cdadd9a010605529e522c2393ebd38
         with:
           java-version: 11
           distribution: temurin

.github/workflows/release_draft_github_release.yml

@@ -78,7 +78,7 @@ jobs:
           sudo apt-get install -y libgtk-3-dev libx11-dev pkg-config cmake ninja-build libblkid-dev
       - name: Install Android dependencies
         if: matrix.target == 'Android'
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@d854b6da19cdadd9a010605529e522c2393ebd38
         with:
           java-version: "12.x"
           distribution: temurin