Pin workflow action dependencies

[bdehamer]

Update workflows to properly pin referenced actions by SHA

Also removes the publish-immutable-actions workflow.

[Copilot]

Pull Request Overview

Updates GitHub Actions workflows to improve security by pinning action dependencies to specific SHA hashes instead of mutable version tags, and removes the publish-immutable-actions workflow.

• Replaces version tags (e.g., @v4) with SHA hashes and version comments for all action dependencies
• Updates several actions to newer versions while pinning them securely
• Removes the entire publish-immutable-actions.yml workflow file

Reviewed Changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
.github/workflows/publish-immutable-actions.yml	Complete removal of workflow file
.github/workflows/prober.yml	Pin upload-artifact action to SHA hash
.github/workflows/linter.yml	Pin checkout and setup-node actions to SHA hashes with version updates
.github/workflows/codeql-analysis.yml	Pin checkout and CodeQL actions to SHA hashes with version updates
.github/workflows/ci.yml	Pin setup-node action to SHA hash with version update
.github/workflows/check-dist.yml	Pin checkout and setup-node actions to SHA hashes with version updates

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
You can also share your feedback on Copilot code review for a chance to win a $100 gift card. Take the survey.}