fix(ci): pin upload-artifact to valid SHA in fix-unpinned-actions.sh … #12

Job	Run time
governance / Workflow security linter	58m 12s
governance / Well-Known (RFC 9116 + RSR)	58m 12s
governance / Code quality + docs	58m 12s
governance / Guix primary / Nix fallback policy	58m 12s
governance / Security policy checks	58m 12s
governance / Language / package anti-pattern policy	58m 12s
	5h 49m 12s

Provide feedback