chore: update GitHub Action pins

[nikzen]

Summary

• Update GitHub Actions in workflows to the latest upstream default-branch commit SHAs.
• Keep existing action paths and only replace refs after @.

Verification

• Checked generated diff to include only .github/**/*.yml / .github/**/*.yaml workflow action refs.
• CI on this PR should validate the updated action versions.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.36%. Comparing base (0e3c5e4) to head (22868d4).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #29   +/-   ##
=======================================
  Coverage   74.36%   74.36%           
=======================================
  Files           5        5           
  Lines         277      277           
=======================================
  Hits          206      206           
  Misses         71       71           

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 0e3c5e4...22868d4. Read the comment docs.