ci: update workflows to follow security guidelines for best practices

Author: jim-deriv

.github/actions/invalidate_master_cache/action.yml

@@ -4,7 +4,7 @@ runs:
   using: composite
   steps:
     - name: save_cache
-      uses: actions/cache/save@v3
+      uses: actions/cache/save@13aacd865c20de90d75de3b17ebe84f7a17d57d2
       with:
         path: ./node_modules
         key: ${{ runner.os }}-node_modules-${{ hashFiles('./package-lock.json') }}

.github/actions/npm_install_from_cache/action.yml

@@ -5,7 +5,7 @@ runs:
   steps:
     - name: Cache node modules
       id: cache-nodemodules
-      uses: actions/cache/restore@v3
+      uses: actions/cache/restore@13aacd865c20de90d75de3b17ebe84f7a17d57d2
       with:
         path: node_modules
         key: ${{ runner.os }}-node_modules-${{ hashFiles('./package-lock.json') }}

.github/workflows/release_staging.yml

@@ -10,7 +10,7 @@ jobs:
     environment: Staging
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
       - name: Setup Node
         uses: ./.github/actions/setup_node
       - name: Install Dependencies