ci: update GitHub Actions to Node 24 runtime

[JBWatenbergScality]

Summary

• Update GitHub Actions action versions to support Node 24 runtime
• Bumps checkout, setup-node, upload-artifact, download-artifact, cache, docker actions, codecov, codeql, and other actions to their latest versions

Test plan

• Verify CI workflows run successfully after the action version bumps

[claude]

• Missed bumps in changed files — Three actions in files touched by this PR were not updated, but newer Node 24-compatible versions are available:
  • docker-build.yaml:80: actions/checkout@v5 → @v6 (already at @v6 in claude-code-dependency-review.yml)
  • docker-build.yaml:85: docker/setup-qemu-action@v3 → @v4 (other docker actions in this file were bumped)
  • trivy.yaml:36: actions/checkout@v5 → @v6

Review by Claude Code

[claude]

The version bumps in this PR are all valid, but a few other workflow files were missed and still pin actions/checkout@v5:

- lfs-warning.yaml — reusable workflow, uses actions/checkout@v5 (line 33)
- build-docs.yaml — uses actions/checkout@v5 (line 13)
- publish-docs.yaml — uses actions/checkout@v5 (line 27)

If the goal is Node 24 runtime readiness across the repo, these should be bumped to @v6 as well — especially lfs-warning.yaml since it is a reusable workflow consumed by downstream repos.

Additionally, actions/create-github-app-token@v1 in claude-code-dependency-review.yml (line 51) is two major versions behind (latest is v3).

Review by Claude Code