use an exact commit sha instead of a ref due to TOCTOU vulns

[GrantBirki]

This pull request updates the branch-deploy workflow to use an exact commit SHA instead of a ref for added safety

[github-actions]

👋 Thanks for opening a pull request!

If you are new, please check out the trimmed down deployment summary listed below:

1. ✔️ Obtain an approval/review on this pull request

2. 🚀 Branch deploy your pull request to production with .deploy

   If anything goes wrong, rollback with .deploy main

3. 🎉 Merge!

[GrantBirki]

.deploy

[github-actions]

Deployment Triggered 🚀

GrantBirki, started a branch deployment to production

You can watch the progress here 🔗

Branch: sha-instead-of-ref

[github-actions]

Deployment Results ✅

GrantBirki successfully branch deployed branch sha-instead-of-ref to production

Show Results

====================================================================
Starting LDAP Container
Date: Thu Dec  5 21:11:32 UTC 2024, Environment: entitlements-config
====================================================================
9d3457e8240cc92e87cb057b781b7375506daa0e9175ee11c9288ae257b5b10f
====================================================================
Executing deploy-entitlements -c /home/runner/work/entitlements-config/entitlements-config/config/entitlements.yaml
Date: Thu Dec  5 21:11:47 UTC 2024, Environment: entitlements-config
====================================================================
/home/runner/work/entitlements-config/entitlements-config/vendor/bundle/ruby/3.3.0/gems/net-ldap-0.19.0/lib/net/ldap/password.rb:5: warning: base64 was loaded from the standard library, but will no longer be part of the default gems since Ruby 3.4.0. Add base64 to your Gemfile or gemspec. Also contact author of net-ldap-0.19.0 to add base64 into its gemspec.
I, [2024-12-05T21:11:47.548520 #2479]  INFO -- : CHANGE cn=admin,ou=strictly-audited,ou=Entitlements,ou=Groups,dc=example,dc=org in entitlements/strictly-audited
I, [2024-12-05T21:11:47.548562 #2479]  INFO -- : .  - danhoerst
I, [2024-12-05T21:11:47.556827 #2479]  INFO -- : Successfully applied 1 change(s)!