build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1

.github/workflows/ci-long-run.yml

@@ -160,7 +160,7 @@ jobs:
           echo "GATE_ATTEMPT=$GATE_ATTEMPT" >> "$GITHUB_ENV"
           sh scripts/ci/staging.sh verify
       - name: Upload with fresh job token
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: gate-${{ inputs.gate }}-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ steps.verify.outputs.stage }}

.github/workflows/ci-nightly.yml

@@ -38,7 +38,7 @@ jobs:
         run: sh scripts/ci/in-container.sh nightly
       - name: Preserve corpus crashes and mutation reports
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: nightly-${{ github.run_id }}-${{ github.run_attempt }}
           path: |

.github/workflows/ci-quality.yml

@@ -58,7 +58,7 @@ jobs:
         run: sh scripts/check-supply-chain.sh
       - name: Persist quality evidence even on failure
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: quality-${{ github.run_id }}-${{ github.run_attempt }}
           path: |

.github/workflows/issue21-acceptance.yml

@@ -34,7 +34,7 @@ jobs:
           echo "artifact=$(sha256sum target/ci/gate-bundle.tar | cut -d ' ' -f 1)" >> "$GITHUB_OUTPUT"
           echo "profile=$(sha256sum profiles/example-vfd.toml | cut -d ' ' -f 1)" >> "$GITHUB_OUTPUT"
           echo "scenario=$(sha256sum scripts/ci/demo-scenario.json | cut -d ' ' -f 1)" >> "$GITHUB_OUTPUT"
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: issue21-demo-bundle
           path: target/ci/gate-bundle.tar

.github/workflows/issue24-final-acceptance.yml

@@ -163,7 +163,7 @@ jobs:
 
       - name: Upload supply-chain report
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: issue24-final-supply-chain-amd64
           path: target/supply-chain

.github/workflows/release-candidate-build.yml

@@ -183,7 +183,7 @@ jobs:
           rm -rf .issue24-repro-a .issue24-repro-b
 
       - name: Upload architecture stage
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: candidate-${{ matrix.arch }}
           path: target/release-stage/${{ matrix.arch }}
@@ -271,7 +271,7 @@ jobs:
           show-summary: true
 
       - name: Upload candidate product snapshot
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: candidate-product-assets
           path: target/candidate-assets
@@ -338,7 +338,7 @@ jobs:
           } > target/candidate-reference/reference.txt
 
       - name: Upload candidate build reference
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: candidate-build-reference
           path: target/candidate-reference/reference.txt

.github/workflows/release-candidate-finalize.yml

@@ -345,7 +345,7 @@ jobs:
           EOF
 
       - name: Persist external approval anchor artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: finalized-candidate-draft
           path: target/finalize