Fix pypa/gh-action-pypi-publish version to use SHA pinning (#2198)

Author: salmanmkc

.github/workflows/publish.yml

@@ -31,4 +31,4 @@ jobs:
       - name: Build package
         run: uv build
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@v1
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e  # release/v1.13