ci: use tags for immutable github actions

[Fdawgs]

Most first party actions now use https://github.com/actions/publish-immutable-action, which negates the need for commit hashes

[changeset-bot]

⚠️ No Changeset found

Latest commit: c64de5b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[netlify]

✅ Deploy Preview for agitated-mahavira-26f8f9 canceled.

Name	Link
🔨 Latest commit	c64de5b
🔍 Latest deploy log	https://app.netlify.com/projects/agitated-mahavira-26f8f9/deploys/684fa0f4b3854f0008cf34be