On: Gh-actions-lockfile: generate and verify lockfiles for GitHub Actions

[EatFlamingDeath]

I feel like at this point we should just abandon GitHub Actions altogether.