ci: add/update workflow for checking commit conventions

.github/workflows/tf-conventional-commits.yml

@@ -9,7 +9,7 @@ jobs:
   verify-commits:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
         # https://github.com/taskmedia/action-conventional-commits
       - uses: taskmedia/[email protected]