fix: preserve GitHub Actions hashes and versions

[JoshuaKGoldberg]

PR Checklist

• Addresses an existing open issue: fixes 🐛 Bug: Transition mode should not lower GitHub Action pins/versions #1998
• That issue was marked as status: accepting prs
• Steps in CONTRIBUTING.md were taken

Overview

Adds a new workflowsVersions option that reads in any existing pins and comment hashes.

Printing out comment hashes is actually tricky: they're not part of the AST, so I had to add a post-processing step after YAMl printing to turn any uses: string ending with a # comment back from uses: '... # ...' to uses: ... # ....

Skips adding tests for readWorkflowVersions pending JoshuaKGoldberg/bingo#308.

🎁

[codecov]

Codecov Report

Attention: Patch coverage is 96.40000% with 9 lines in your changes missing coverage. Please review.

Project coverage is 99.73%. Comparing base (0a886a2) to head (c842461).
Report is 3 commits behind head on main.

Files with missing lines	Patch %	Lines
src/options/readWorkflowsVersions.ts	85.24%	9 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2007      +/-   ##
==========================================
- Coverage   99.93%   99.73%   -0.20%     
==========================================
  Files         108      113       +5     
  Lines        4367     4569     +202     
  Branches      265      284      +19     
==========================================
+ Hits         4364     4557     +193     
- Misses          3       12       +9     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

🎉 This is included in version v2.9.2 🎉

The release is available on:

• GitHub releases
• npm package (@latest dist-tag)

Cheers! 📦🚀