action: use a venv to prevent PEP 668 errors #305

Job	Run time
selftest-custom-paths	22s
selftest-glob	23s
selftest (ubuntu-latest)	20s
selftest-glob-multiple	21s
selftest (macos-latest)	20s
selftest-identity-token	19s
selftest (windows-latest)	42s
selftest-release-signing-artifacts-no-op (ubuntu-latest)	21s
selftest (ubuntu-24.04)	24s
selftest-release-signing-artifacts-no-op (macos-latest)	20s
selftest-runner-python (ubuntu-latest)	18s
selftest-staging	21s
selftest-release-signing-artifacts-no-op (windows-latest)	1m 44s
selftest-runner-python (ubuntu-24.04)	18s
selftest-upload-artifacts	23s
selftest-verify	19s
selftest-whitespace (ubuntu-latest)	25s
selftest-xfail-glob-input-expansion	21s
selftest-xfail-invalid-inputs (--this-should-not-work)	19s
selftest-whitespace (macos-latest)	22s
selftest-xfail-invalid-inputs (/tmp/extremely-nonexistent-file)	16s
selftest-whitespace (windows-latest)	50s
selftest-xfail-verify-missing-options (true)	17s
selftest-xfail-verify-missing-options (true, https://token.actions.githubusercontent.com)	16s
selftest-xfail-verify-missing-options (true, https://github.com/sigstore/gh-action-sigstore-pytho...	17s
selftest-xfail-verify-missing-options (false, https://token.actions.githubusercontent.com)	19s
selftest-xfail-verify-missing-options (false, https://github.com/sigstore/gh-action-sigstore-pyth...	18s
all-selftests-pass	3s
	11m 18s

Provide feedback