Pin GitHub actions

[coheigea]

It promotes security as Github tags can be deleted

[github-actions]

🌟 Thank you for your contribution to the Apache Camel project! 🌟
🤖 CI automation will test this PR automatically.

🐫 Apache Camel Committers, please review the following items:

• First-time contributors require MANUAL approval for the GitHub Actions to run
• You can use the command /component-test (camel-)component-name1 (camel-)component-name2.. to request a test from the test bot although they are normally detected and executed by CI.
• You can label PRs using skip-tests and test-dependents to fine-tune the checks executed by this PR.
• Build and test logs are available in the summary page. Only Apache Camel committers have access to the summary.

⚠️ Be careful when sharing logs. Review their contents before sharing them publicly.

[davsclaus]

I guess bots know about this so they can keep raising PRs when there are newer versions ?

[coheigea]

I guess bots know about this so they can keep raising PRs when there are newer versions ?

Yep, dependabot works fine with it and will update the version in the comment as well.