chore: bump actions/checkout and actions/setup-node to v7

[pinecone-groundskeeper]

⚠️ This PR modifies CI workflow files. They execute on the PR branch before merge — review the workflow diff directly; do not treat a passing check as review.

Problem

.github/workflows/ci.yml pinned actions/checkout@v4 and actions/setup-node@v4 (four usages total: two in build-and-test, two in audit). Both were three majors behind their current releases: actions/checkout v7.0.1 (2026-07-20) and actions/setup-node v7.0.0 (2026-07-14).

Solution

Bumped all four usages to actions/checkout@v7 and actions/setup-node@v7. No other workflow behavior changed — same triggers, permissions, concurrency group, job structure, and steps.

Verification

Confirmed via git diff that only the four version pins changed and nothing else in the file. I don't have a way to actually execute a GitHub Actions runner from this sandbox, so I can't directly observe the build-and-test/audit jobs running end-to-end against the new action versions — that will show up once this PR's own checks run. Both actions are widely used, and v7 of each is a routine major bump (setup-node v7 migrated internally to ESM but its with:/usage surface is unchanged; checkout v7 has no breaking input/output changes relevant to this repo's usage).

Closes #33

Generated by GitHub Maintenance Fixer · sonnet50 · 61.8 AIC · ⌖ 17.2 AIC · ⊞ 9.4K · ◷

---

Note

Low Risk
CI-only dependency pin updates with no changes to workflow behavior or application code; risk is limited to possible runner/action compatibility, which is typical for standard action major bumps.

Overview
Updates only the GitHub Actions version pins in ci.yml: all four references move from v4 to v7 for actions/checkout and actions/setup-node in the build-and-test and audit jobs.

Triggers, permissions, concurrency, matrix Node versions, and every run: step are unchanged—this is a maintenance bump with no application or test logic edits.

^{Reviewed by Cursor Bugbot for commit fa30077. Bugbot is set up for automated code reviews on this repo. Configure here.}