Resolve upstream Actions explicitly and check out the exact event revision

.gitea/workflows/build-and-push.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: butler-ci
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: https://github.com/actions/checkout@v4
 
       - name: Select relevant delivery work
         id: delivery
@@ -39,15 +39,15 @@ jobs:
           bash scripts/ci-select.sh
       - name: Set up QEMU
         if: ${{ steps.delivery.outputs.run == 'true' }}
-        uses: docker/setup-qemu-action@v3
+        uses: https://github.com/docker/setup-qemu-action@v3
 
       - name: Set up Docker Buildx
         if: ${{ steps.delivery.outputs.run == 'true' }}
-        uses: docker/setup-buildx-action@v3
+        uses: https://github.com/docker/setup-buildx-action@v3
 
       - name: Log in to Gitea registry
         if: ${{ (steps.delivery.outputs.run == 'true') && github.event_name != 'pull_request' }}
-        uses: docker/login-action@v3
+        uses: https://github.com/docker/login-action@v3
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ secrets.REGISTRY_USERNAME }}
@@ -79,7 +79,7 @@ jobs:
 
       - name: Build and push image
         if: ${{ steps.delivery.outputs.run == 'true' }}
-        uses: docker/build-push-action@v6
+        uses: https://github.com/docker/build-push-action@v6
         with:
           context: .
           push: ${{ github.event_name != 'pull_request' }}