chore: use sha instead of tag on stale workflow

didn't catch this in #1821

Using SHA instead of tag ensures secure supply chain.  Tags are mutable, SHAs are not

Signed-off-by: jmeridth <jmeridth@gmail.com>

.github/workflows/stale.yml

@@ -18,7 +18,7 @@ jobs:
       pull-requests: write
 
     steps:
-    - uses: actions/stale@v5
+    - uses: actions/stale@f7176fd3007623b69d27091f9b9d4ab7995f0a06 # v5
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
         stale-issue-message: 'Stale issue message'