fix(ci): replace invalid Actions pin with the commit SHA it resolves to

[MGPOCKY]

Problem

These workflow uses: pins are invalid as written. Each item below shows the current value, why it is wrong, and the correct ref that must be used instead.

1. .github/workflows/build_wheels.yml

Current (invalid):

uses: pypa/cibuildwheel@65b8265957fd86372d9689a0acdfd55813970d5d # v3.1.4

Why this is wrong:

• 65b8265957fd86372d9689a0acdfd55813970d5d is not a commit SHA. It is the Git object SHA of an annotated tag (v3.1.4).
• GitHub Actions does not accept annotated tag object SHAs in uses: pins (Commits API returns No commit found for SHA).
• The correct pin is the commit SHA that tag v3.1.4 points to: c923d83ad9c1bc00211c5041d0c3f73294ff88f6.

Correct pin:

uses: pypa/cibuildwheel@c923d83ad9c1bc00211c5041d0c3f73294ff88f6 # v3.1.4

Test plan

• Each updated uses: ref resolves as a commit via the GitHub Commits API
• Relevant CI jobs on this branch look healthy