Use the full v8.0.0 commit SHA so Actions can resolve the action.
Publish saelix/sencho:pr-N and preview-sha from open PRs. Uses Trivy and smoke gates matching the integration build.