Replace the sdk repository reference with a hard sha reference

The tag apparently has different meanings/contents in different
google mirrors for this particular repo... FUN!

Change-Id: I5f9335af4da7114d83457ca041026f3be99c32ce