ci: pin all GitHub Actions to SHA hashes and update versions (#1681)

Update action versions and pin to full SHA commit hashes.
Windows build parallelization is disabled to avoid hung CI.

.github/workflows/stale.yml

@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Stale Issues and PRs Policy
         id: stale-issues-and-prs-policy
-        uses: actions/stale@v10
+        uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10
         with:
           repo-token: ${{ github.token }}
           days-before-stale: 90
@@ -46,7 +46,7 @@ jobs:
 
       - name: needs-more-information and waiting-for-reporter Stale Issues Policy
         id: specific-stale-issues-policy
-        uses: actions/stale@v10
+        uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10
         with:
           repo-token: ${{ github.token }}
           only-labels: "needs-more-information,waiting-for-reporter"