fix(ci): pin Logos to a known-good commit to unbreak both build workflows

[InvalidPandaa]

Closes #292

Problem

Both build workflows currently fail during Logos preprocessing:

src/Features/Reels/ReelsPlayback.xm:43: error: Invalid argument structure in %orig
make[3]: *** [.../ReelsPlayback.xm.mm] Error 255

This affects anyone forking the repo and running the workflows — nothing in SCInsta changed.

Cause

buildapp.yml and buildtweak.yml check out theos/theos with ref: master and
submodules: recursive, so they always pull the newest Logos. On 2026-06-29,
theos/logos#114 ("Support multi-line block
arguments in %orig calls", commit 777925d) rewrote the %orig handler: it now replaces
everything from %orig to the end of the line and re-appends only ;.

Every %orig that is not alone on its line therefore loses the rest of its line,
including closing brackets:

Source	After preprocessing
VOID_HANDLESCREENSHOT(%orig);	VOID_HANDLESCREENSHOT(...;
return [SCIUtils liquidGlassEnabledBool:%orig];	return [SCIUtils liquidGlassEnabledBool:...;
[SCIUtils showConfirmation:^(void) { %orig; }];	[SCIUtils showConfirmation:^(void) { ...;

Hence the expected ']' and unterminated function-like macro invocation errors further
down the build. SCInsta uses this idiom in ~232 places; the code is correct and unchanged.

Fix

A Pin Logos to known-good version step in both workflows, right after Setup Theos:

- name: Pin Logos to known-good version
  run: |
    cd "$THEOS/vendor/logos"
    git fetch --depth=1 origin a62370066a97e36d59b200a9fa10c5091f5e8972
    git checkout a62370066a97e36d59b200a9fa10c5091f5e8972
  env:
    THEOS: ${{ github.workspace }}/theos

a623700 is the direct parent of 777925d, so only the regression is excluded and every
other upstream Logos fix is retained. Only the two workflow files change — no source edits.

Verification

logos.pl was run over all 37 sources under src/, and the generated output checked for
balanced (), {} and [] (comments and string/char literals stripped first):

Logos commit	files checked	broken
777925d (current master)	37	14
a623700 (pinned)	37	0

Run A reproduced the reported ReelsPlayback.xm:43 error exactly; the other 13 files produced
unbalanced output, worst being src/Tweak.x (()+15 {}+19 []+9).

The pin step itself was validated against a shallow clone of the public remote — the same
state actions/checkout with submodules: recursive leaves behind — confirming that
git fetch --depth=1 origin <sha> resolves a specific commit on theos/logos.

Notes

• The pin should be removed once the regression is fixed upstream. It is not yet reported
  on theos/logos, so an upstream issue is still worth filing.
• Related but non-overlapping: Security: Pin CI dependencies to commit SHAs to prevent supply chain attacks #255 / pin github actions #277 pin GitHub Actions to commit SHAs. Those do not
  cover the Theos/Logos submodule, which is what breaks here. pin github actions #277 edits the uses: line of
  the same Setup Theos step, so the two touch adjacent lines but different content.

[InvalidPandaa]

[SoCuul]

I haven't tried this myself, but I'm going to merge this as a stopgap until I am able to work on fixing compatibility with newer theos releases.

Thank you so much!