fix(registry): checkout from a known sha

This way, we can bust the cache when we rebase the branch.