As there's no lockfile for GitHub Actions, specify the commit SHAs to
use for community actions so that changes can be reviewed before using a
new version of a particular action.
Use a SQLite database to test installing the site from the existing
configuration. If there is an error with the configuration (e.g. trying
to enable a module that isn't present) then the job will fail.
Fixes#60