build-job.yml -> update action versions to latest, pin to SHA for security

[jdegenstein]

• Current actions versions are getting pretty old and will stop functioning in Fall 2026 because of Node 20 dependency. I updated all actions to the most recent releases.
• Current actions versions are technically vulnerable to a supply chain attack since they do not pin the SHA version
• There are a number of security improvements in the more recent actions versions.
• I did not fix .github/actions/micromamba/action.yml which is also vulnerable to a supply chain attack and maybe also a man-in-the-middle attack via HTTP vs. HTTPS. I did not want to touch this because of the recent issues with setup-micromamba that necessitated creation of this action.