chore: update GitHub Action pins

[nikzen]

Summary

• Update GitHub Actions in workflows to the latest upstream default-branch commit SHAs.
• Keep existing action paths and only replace refs after @.

Verification

• Checked generated diff to include only .github/**/*.yml / .github/**/*.yaml workflow action refs.
• CI on this PR should validate the updated action versions.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.39%. Comparing base (dadce64) to head (c50de3d).

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #258      +/-   ##
==========================================
- Coverage   80.39%   80.39%   -0.01%     
==========================================
  Files         501      501              
  Lines       72351    72351              
  Branches    10906    10906              
==========================================
- Hits        58168    58165       -3     
- Misses      10903    10905       +2     
- Partials     3280     3281       +1     

see 1 file with indirect coverage changes

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update dadce64...c50de3d. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.