ci: bump cibuildwheel to v4.1.0 (allowlisted SHA) (#48)

The pinned v3.3.1 SHA fell off the ASF Actions allowlist, causing Release
startup_failure on rc tags. Bump to v4.1.0, a current allowlisted SHA.

Co-authored-by: mingfeng <tjg281622@antgroup.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: 3 people

.github/workflows/release-python.yml

@@ -61,7 +61,7 @@ jobs:
           python-version: "3.12"
 
       - name: Build wheels via cibuildwheel
-        uses: pypa/cibuildwheel@298ed2fb2c105540f5ed055e8a6ad78d82dd3a7e
+        uses: pypa/cibuildwheel@294735312765b09d24a2fbec22660ce817587d55
         with:
           package-dir: python
           output-dir: wheelhouse