Update GitHub Actions workflows

- Pin to full -length commit hash
- Add master alongside main

.github/workflows/tinygo.yml

@@ -2,11 +2,9 @@ name: TinyGo Build
 
 on:
   push:
-    branches: [ "main", "master" ]
-    tags:
-      - 'v*'
+    branches: [ "tinygo" ]
   pull_request:
-    branches: [ "main", "master" ]
+    branches: [ "tinygo" ]
 
 jobs:
   tinygo-build:
@@ -32,10 +30,10 @@ jobs:
 
     steps:
     - name: Checkout code
-      uses: actions/checkout@v4
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
     - name: Set up Go
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00
       with:
         go-version: '1.24'
 
@@ -60,7 +58,7 @@ jobs:
         fi
 
     - name: Upload Artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
       with:
         name: ${{ matrix.name }}
         path: bin/${{ matrix.output }}*