Make cuda-verion required, add missing copright/license

Also pin actions to SHAs (skip ilammy/msvc-dev-cmd for now awaiting
update to the allow list).

Author: cryos

.github/workflows/build-wheel.yml

@@ -1,12 +1,16 @@
+# Copyright (c) 2025, NVIDIA CORPORATION & AFFILIATES. ALL RIGHTS RESERVED.
+#
+# SPDX-License-Identifier: Apache-2.0
+
 on:
   workflow_call:
     inputs:
       host-platform:
         required: true
         type: string
       cuda-version:
+        required: true
         type: string
-        default: "12.8.0"
 
 defaults:
   run:
@@ -83,7 +87,7 @@ jobs:
           env
       
       - name: Build cuda.core wheel
-        uses: pypa/cibuildwheel@v2.22.0
+        uses: pypa/cibuildwheel@faf86a6ed7efa889faf6996aa23820831055001a  # v2.23.3
         env:
           CIBW_BUILD: ${{ env.CIBW_BUILD }}
           CIBW_ARCHS_LINUX: "native"
@@ -122,7 +126,7 @@ jobs:
           cuda-version: ${{ inputs.cuda-version }}
 
       - name: Build cuda.bindings wheel
-        uses: pypa/cibuildwheel@v2.22.0
+        uses: pypa/cibuildwheel@faf86a6ed7efa889faf6996aa23820831055001a  # v2.23.3
         env:
           CIBW_BUILD: ${{ env.CIBW_BUILD }}
           CIBW_ARCHS_LINUX: "native"

.github/workflows/ci.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2025, NVIDIA CORPORATION & AFFILIATES. ALL RIGHTS RESERVED.
+#
+# SPDX-License-Identifier: Apache-2.0
+
 # Note: This name is referred to in the test job, so make sure any changes are sync'd up!
 # Further this is referencing a run in the backport branch to fetch old bindings.
 name: "CI"