Use maven wrapper in gha. Use commit hash instead of version for imported steps

.github/workflows/eclipse-ls-extensions.yml

@@ -13,9 +13,9 @@ jobs:
   eclipse-distro-build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
       - name: Set up JDK 17
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2
         with:
           java-version: '17'
           distribution: 'temurin'
@@ -27,7 +27,7 @@ jobs:
       - name: Build Language Servers JARs
         run: |
           cd headless-services
-          xvfb-run mvn --batch-mode clean install -DskipTests
+          xvfb-run ./mvnw --batch-mode clean install -DskipTests
 #      - name: Install GPG key
 #        run: |
 #          echo "${{ secrets.GPG_PRIVATE_KEY }}" > gpg.asc
@@ -41,4 +41,4 @@ jobs:
 #          gpg_homedir: ${{ github.workspace }}
         run: |
           cd eclipse-language-servers
-          xvfb-run mvn --batch-mode clean deploy -Pe428 -Psnapshot -Pgitactions -DbuildNumber=${{ steps.timestamp.outputs.timestamp }} -Dsigning.skip=true -Dhttpclient.retry-max=20 -Declipse.p2.mirrors=false -Ds3service.https-only=true -Dmaven.test.skip=true -Dtycho.localArtifacts=ignore
+          xvfb-run ./mvnw --batch-mode clean deploy -Pe428 -Psnapshot -Pgitactions -DbuildNumber=${{ steps.timestamp.outputs.timestamp }} -Dsigning.skip=true -Dhttpclient.retry-max=20 -Declipse.p2.mirrors=false -Ds3service.https-only=true -Dmaven.test.skip=true -Dtycho.localArtifacts=ignore