Pin deployments to release tags

[shenanigansd]

Now that we're starting to get manageable releases out for our apps, we should start pinning the deployments to the releases to avoid surprises.
I have created #35 to show what this would look like.

[Robin5605]

Good idea. However the recommended way is to generally pin to commit hash (see Security Hardening for GitHub Actions) Though this is mostly for third party actions, it wouldn't hurt to be consistent.

I don't think pinning to commit hashes for our own internal releases is too big of a deal but perhaps something worth discussing.

[shenanigansd]

Good idea. However the recommended way is to generally pin to commit hash (see Security Hardening for GitHub Actions)

958484a