Check for mismatches

this CI run should fail, I'll later restrict this check to only on tag pushes

Author: drewcassidy

.github/workflows/internal-ci.yml

@@ -39,6 +39,10 @@ jobs:
           minver 
           echo "version=$(minver -v e)" >> "$GITHUB_OUTPUT"
 
+      - name: Check Workflow Pinning
+        run: |
+          ! grep -P -i 'uses: KSPModdingLibs/KSPBuildTools/\.github/actions/.*@(?!${{github.ref_name}}$)' .github/workflows/*.yml
+
       - name: Build
         run: dotnet build KSPBuildTools.csproj