ci: pin actions to commit SHAs and add shellcheck#3126

mnriem merged 4 commits into

github:maingithub/spec-kit:mainfrom

PascalThuet:split/pin-actions-shellcheckPascalThuet/spec-kit:split/pin-actions-shellcheckCopy head branch name to clipboard