Our BCR config has the url with the unstable sha behavior (the /archive urls): https://github.com/bazelbuild/rules_python/blob/main/.bcr/source.template.json