fix(ci): refresh pinned ClawHub publish source

Use the current deployed ClawHub package publish source for release publishing while leaving the suspicious scanner pin unchanged.

Author: vincentkoc

.github/workflows/clawhub-package-publish.yml

@@ -116,7 +116,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           repository: openclaw/clawhub
-          ref: 4787be4eb1e06b4ffb947456a6559835a4307f7b
+          ref: b07196f336ae401e148dbab9cdca3d9286eef689
           path: clawhub-source
 
       - name: Install ClawHub CLI dependencies