fix: correct full SHA hash for attest-build-provenance action

- Update SHA from 977bb370af052e1ff6b5ac6b1b0a2b1fdad3e4cd to 977bb373ede98d70efdf65b84cb5f73e068dcc2a
- Fix publish workflow failure caused by truncated commit hash
- Ensure proper provenance attestation for v3.0.0 release

Author: ramonclaudio

.github/workflows/publish.yml

@@ -43,7 +43,7 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Generate package attestation
-        uses: actions/attest-build-provenance@977bb370af052e1ff6b5ac6b1b0a2b1fdad3e4cd # v3.0.0
+        uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
         if: success()
         with:
           subject-path: '*.tgz'