Version locking definitions

[timfpark]

As an operator, I don't want to import a particular Fabrikate definition and then have an unrelated change in another definition trigger a CI/CD build that pulls in a new version of this definition.

Instead, we should version lock definitions such that if a downstream user specifies a specific git commit as a version that the resource manifests it generates are always the same.