The actions actions/checkout@v4, actions/setup-python@v5, snok/install-poetry@v1, actions/cache@v4.2.3, and github/codeql-action/init@v2 are not allowed in intility/fastapi-azure-auth because all actions must be pinned to a full-length commit SHA.