ci: properly invoke nox via uv

Author: davidhewitt

.github/workflows/release.yml

@@ -4,6 +4,10 @@ on:
   push:
     tags:
       - "v*"
+  workflow_dispatch:
+    inputs:
+      version:
+        description: The version to build
 
 jobs:
   release:
@@ -13,14 +17,18 @@ jobs:
     runs-on: ubuntu-latest
     environment: release
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          # The tag to build or the tag received by the tag event
+          ref: ${{ github.event.inputs.version || github.ref }}
+          persist-credentials: false
 
       - uses: astral-sh/setup-uv@v6
 
       - uses: rust-lang/crates-io-auth-action@v1
         id: auth
 
       - name: Publish to crates.io
-        run: nox -s publish
+        run: uvx nox -s publish
         env:
           CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}