VLN-1635: remediate unpinned-github-actions

[picatz]

🏕️ This pull request was created by camper, an automated security campaign tool.

Finding

Rule	unpinned-github-actions
Severity	MEDIUM
Repository	temporalio/benchmark-workers
Ticket	VLN-1635

Summary

🤠 Deputy pinned dependencies to immutable references.

• Total refs: 9
• Pinned refs: 7
• Already pinned: 2

Changed references:

• actions/checkout: v3 -> a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0
• docker/setup-buildx-action: v3 -> 8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
• docker/build-push-action: v6 -> 10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
• actions/create-github-app-token: v2 -> fee1f7d63c2ff003460e3d139729b119787bc349 # v2.2.2
• actions/checkout: v3 -> a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0
• azure/setup-helm: v3 -> 5119fcb9089d432beecbf79bb2c7915207344b78 # v3.5
• docker/login-action: v2 -> 465a07811f14bebb1938fbed4728c6a1ff8901fc # v2.2.0

Instructions

• Approve to merge this fix
• Request changes to trigger a new remediation attempt
• /camper rebase — rebase onto the base branch
• /camper close — close this PR without merging
• /camper retry — regenerate the fix from scratch against the current base

[picatz]

This PR has had no activity for 7 days and may need attention.

Actions you can take:

• Review and approve if the changes look good
• Close if this fix is no longer needed
• Comment /camper rebase to rebase onto the latest base branch
• Comment /camper retry to regenerate the fix