check out correct SHA

Author: jameslamb

.github/workflows/build_test_publish_images.yaml

@@ -77,6 +77,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
         with:
+          ref: ${{ inputs.sha }}
           fetch-depth: 0 # unshallow fetch for setuptools-scm
           persist-credentials: false