fix: pin actions versions in cta-transitions.yml (#2054)

## PR Checklist

- [x] Addresses an existing open issue: fixes #2038
- [x] That issue was marked as [`status: accepting
prs`](https://github.com/JoshuaKGoldberg/create-typescript-app/issues?q=is%3Aopen+is%3Aissue+label%3A%22status%3A+accepting+prs%22)
- [x] Steps in
[CONTRIBUTING.md](https://github.com/JoshuaKGoldberg/create-typescript-app/blob/main/.github/CONTRIBUTING.md)
were taken

## Overview

🎁

Author: JoshuaKGoldberg

src/blocks/blockCTATransitions.ts

@@ -40,7 +40,11 @@ export const blockCTATransitions = base.createBlock({
 										},
 										{
 											id: "auto-commit-action",
-											uses: "stefanzweifel/git-auto-commit-action@v5",
+											uses: resolveUses(
+												"stefanzweifel/git-auto-commit-action",
+												"v5",
+												options.workflowsVersions,
+											),
 											with: {
 												commit_author:
 													"The Friendly Bingo Bot <[email protected]>",
@@ -52,7 +56,11 @@ export const blockCTATransitions = base.createBlock({
 										},
 										{
 											if: "steps.auto-commit-action.outputs.changes_detected == 'true'",
-											uses: "mshick/add-pr-comment@v2",
+											uses: resolveUses(
+												"mshick/add-pr-comment",
+												"v2",
+												options.workflowsVersions,
+											),
 											with: {
 												issue: "${{ github.event.pull_request.number }}",
 												message: [