ci(.github): pin actions to commit-hash; set permissions at job level#422

Fdawgs merged 2 commits intomainFdawgs/node-unrtf:mainfrom

ci/pinFdawgs/node-unrtf:ci/pinCopy head branch name to clipboard