Pin setup-uv to a commit sha across downstream jobs (#1213)