`approved_patterns.yaml` is hard for humans

[dave2wave]

Two improvements would help.

1. Sort the list alphabetically.
2. Add a comment about the version tag the sha belongs too. I have to perform a manual search when more than one sha hash is approved to know which is the latest.

[raboof]

approved_patterns.yaml isn't really meant for humans, you're likely looking for actions.yml.

Sorting it is planned with #203 and a start was made in #433 but that's been waiting for review until just now - but it looks like I need to fix the merge conflict again.

[dave2wave]

I am looking for actions.yaml. That works for me.