pin b3-builder to 235e6bb (refuse an unproven publisher claim at pack time)

Author: unlucio

.github/workflows/pr-build.yml

@@ -35,7 +35,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: Bespok3d/b3-builder@918b7c9ea7af20e1f5f339e839fdc58a2b17b54c  # main @ 2026-07-22
+      - uses: Bespok3d/b3-builder@235e6bb8c25616748a795021b14d3ec40f81ee09  # main @ 2026-07-22
         with:
           unit: repo
           bake: 'true'

.github/workflows/release.yml

@@ -27,7 +27,7 @@ jobs:
         with:
           fetch-depth: 0   # full history so the index.json push can rebase on a concurrent update
 
-      - uses: Bespok3d/b3-builder@918b7c9ea7af20e1f5f339e839fdc58a2b17b54c  # main @ 2026-07-22
+      - uses: Bespok3d/b3-builder@235e6bb8c25616748a795021b14d3ec40f81ee09  # main @ 2026-07-22
         with:
           unit: repo
           # Per-repo Actions secret today (GitHub Free cannot org-secret private repos); becomes ONE org