[Github] Fix security issues in libcxx-run-benchmarks.yml workflow (#158467)
There was one action dependency that was not hash pinned and this
workflow also allowed code injection as the input might not be properly
escaped when dumped into the run script.