Fix CI: pin action SHAs and fix test config

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

RoadChain-SHA2048: df8eea7ec8d7060b
RoadChain-Identity: alexa@sovereign
RoadChain-Full: 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

Author: blackboxprogramming

.github/workflows/ci.yml

@@ -14,8 +14,8 @@ jobs:
       matrix:
         python-version: ["3.10", "3.11", "3.12"]
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies