use hash commit pin for `pypa/gh-action-pypi-publish`

[kevinjqliu]

Apache Iceberg version

None

Please describe the bug 🐞

https://github.com/apache/iceberg-python/pull/3204/files#diff-061c7641a869d72d9f164de0047a2e19132403ca4d3c0679c578b02e6d403635R89

get rid of zizmor ignore

Willingness to contribute

• I can contribute a fix for this bug independently
• I would be willing to contribute a fix for this bug with guidance from the Iceberg community
• I cannot contribute a fix for this bug at this time

[kevinjqliu]

fix for rust too, apache/iceberg-rust#2290

[kevinjqliu]

asf infra pr apache/infrastructure-actions#619