DT-2276: Update version references to hashes

[rushtong]

Addresses

https://broadworkbench.atlassian.net/browse/DT-2276

Summary

Updates version references to exact hashes for the following GHAs:

• https://github.com/google-github-actions/setup-gcloud/releases/tag/v3.0.1
• Release: v3.0.0 google-github-actions/auth#510
• https://github.com/docker/login-action/releases/tag/v3.5.0

This addresses a Sonar warning that calls this out as a security hotspot: https://sonarcloud.io/organizations/broad-databiosphere/rules?open=githubactions%3AS7637&rule_key=githubactions%3AS7637

---

Have you read CONTRIBUTING.md lately? If not, do that first.

• Label PR with a Jira ticket number and include a link to the ticket
• Label PR with a security risk modifier [no, low, medium, high]
• PR describes scope of changes
• Get a minimum of one thumbs worth of review, preferably two if enough team members are available
• Get PO sign-off for all non-trivial UI or workflow changes
• Verify all tests go green
• Test this change deployed correctly and works on dev environment after deployment

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud