chore: update GitHub Action pins

[nikzen]

Summary

• Update GitHub Actions in workflows to the latest upstream default-branch commit SHAs.
• Keep existing action paths and only replace refs after @.

Verification

• Checked generated diff to include only .github/**/*.yml / .github/**/*.yaml workflow action refs.
• CI on this PR should validate the updated action versions.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 58.37%. Comparing base (79357b8) to head (105227d).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2344      +/-   ##
==========================================
+ Coverage   53.44%   58.37%   +4.93%     
==========================================
  Files         161      161              
  Lines       19923    19923              
==========================================
+ Hits        10647    11631     +984     
+ Misses       9276     8292     -984     

see 27 files with indirect coverage changes

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 79357b8...105227d. Read the comment docs.