ci: replace tag with commit sha due to security concerns

[sahani-deriv]

Clickup link: https://app.clickup.com/t/20696747/MOBC-686

This PR contains the following changes:

replced tag with commit hash on third party actions due to security concerns.

• ✨ New feature (non-breaking change which adds functionality)
• 🛠️ Bug fix (non-breaking change which fixes an issue)
• ❌ Breaking change (fix or feature that would cause existing functionality to change)
• 🧹 Code refactor
• ✅ Build configuration change
• 📝 Documentation
• 🗑️ Chore

Developers Note (Optional)

By referring to commit hash the actions we are using are immutable, hence no concern for someone manipulating it.

Pre-launch Checklist (For PR creator)

As a creator of this PR:

• ✍️ I have included clickup id and package/app_name in the PR title.
• 👁️ I have gone through the code and removed any temporary changes (commented lines, prints, debug statements etc.).
• ⚒️ I have fixed any errors/warnings shown by the analyzer/linter.
• 📝 I have added documentation, comments and logging wherever required.
• 🧪 I have added necessary tests for these changes.
• 🔎 I have ensured all existing tests are passing.

Reviewers

@ramin-deriv

Pre-launch Checklist (For Reviewers)

As a reviewer I ensure that:

• ✴️ This PR follows the standard PR template.
• 🪩 The information in this PR properly reflects the code changes.
• 🧪 All the necessary tests for this PR's are passing.

Pre-launch Checklist (For QA)

• 👌 It passes the acceptance criteria.

Pre-launch Checklist (For Maintainer)

• [MAINTAINER_NAME] I make sure this PR fulfills its purpose.