fix(ci): use SLSA builder tag reference instead of pinned SHA

Using the mutable @v2.0.0 tag instead of the pinned SHA, as this was
working for v0.17.0 release. The pinned SHA might resolve differently
than expected.

Author: CybotTM

.github/workflows/release-slsa.yml

@@ -42,7 +42,7 @@ jobs:
       id-token: write
       contents: write
       actions: read
-    uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@5a775b367a56d5bd118a224a811bba288150a563 # v2.0.0
+    uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v2.0.0
     with:
       go-version-file: go.mod
       config-file: .slsa-goreleaser/${{ matrix.target }}.yml