Ensures repos created from this template start with GitHub Actions SHA pinning
configured. Matches the pinDigests: true change being applied to all existing
plugin repos (PRI-757).
Without this, new repos created from the template would need a follow-up PR
to add pinDigests.