Pin GitHub Actions dependencies with commit SHAs, migrate to gradle/actions, and switch to weekly updates

Pin GitHub Actions dependencies with commit SHAs, migrate to gradle/actions, and switch to weekly updates #368