ci: fix docker/setup-qemu-action SHA (v3 tag force-pushed upstream)

[polaz]

Problem

The Release workflow fails on all platforms with:

Unable to resolve action `docker/setup-qemu-action@29109295f81e9208d7d86ff9f9a89f41e8f8e6f3`

GitHub Actions resolves all action refs at startup — even for steps with if: conditions — so the broken SHA causes every matrix job to fail immediately.

Root cause

The docker/setup-qemu-action v3 tag was force-pushed upstream; SHA 29109295 no longer exists.

Fix

Update pin to c7c53464 (v3.7.0) — current stable SHA.

Acceptance criteria

• Release workflow completes successfully on next tag push

[coderabbitai]

🔗 Related PRs

#6 - fix(release): pin build version via SETUPTOOLS_SCM_PRETEND_VERSION [merged]
#40 - ci(release): fix embedded wheel builds for Windows, macOS, and Linux aarch64 [merged]

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!