chore: use a fixed version of gh-action-pypi-publish

chore: use a fixed version of gh-action-pypi-publish #3759