ci: use devbox gh action instead

.github/workflows/slsa-publish.yml

@@ -12,9 +12,10 @@ jobs:
 
     steps:
       - uses: actions/checkout@v3
+      - name: install devbox  
+        uses: jetpack-io/devbox-install-action@v0.2.0
       - name: build artifacts
         run: |
-            curl -fsSL https://get.jetpack.io/devbox | bash -f
             devbox run poetry install
             devbox run poetry build
       - name: hash artifacts