minor refactor: use direct sha1 number even though infra permits friendly version name

Author: paulk-asert

.github/workflows/groovy-build-coverage.yml

@@ -42,7 +42,7 @@ jobs:
         run: ./gradlew -Pcoverage=true jacocoAllReport
         timeout-minutes: 60
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           verbose: true