chore(gha): migrate to actions lockfile (#4124)