Switch git override to stable BCR tag for nanobind_bazel

[nicholasjng]

This comes following the first BCR release of nanobind_bazel.

Feature-wise, nothing substantial has changed, except that the extensions are stripped of debug info when built in release mode, which reduces clutter in the symbol tables.

No stubgen, since nanobind v2 has not been released yet.