ci(github): use Apache allowed SHA-pinned GitHub Actions

[empiredan]

Update GitHub Actions references to use SHA-pinned versions allowed by Apache infrastructure.

Changes:

• Replace Docker-related actions with Apache allowlist SHA versions.
• Replace dorny/paths-filter with the Apache allowlist SHA version.
• Replace golangci/golangci-lint-action with the Apache allowlist SHA version.
• Pin apache/skywalking-eyes to a concrete SHA instead of main.
• Add or normalize version comments above action SHA references.

Validation:

• Confirmed all active uses entries are pinned to 40-character SHA values.
• Confirmed all active uses entries have version comments.