Remove pinned actions (#145)

Remove pinned actions for BCR release process (tags are required as part
of slsa-verifier check).

Author: pkwarren

.github/workflows/publish-to-bcr.yaml

@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   publish:
-    uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@0a23c53c2baffdaf2ce8dd23c2c0e45eb3b79093 # v1.2.0
+    uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@v1.2.0
     with:
       tag_name: ${{ inputs.tag_name || github.ref_name }}
       registry_fork: bufbuild/bazel-central-registry

.github/workflows/release.yaml

@@ -39,7 +39,7 @@ jobs:
               sha: commitTag.data.sha,
             });
   release:
-    uses: bazel-contrib/.github/.github/workflows/release_ruleset.yaml@af28703814cf26522cf5e44d219efece91293123 # v7.4.0
+    uses: bazel-contrib/.github/.github/workflows/release_ruleset.yaml@v7.4.0
     needs: create-release-tag
     with:
       release_files: rules_buf-*.tar.gz