Bump pipeline actions to latest major versions

actions/checkout v4 -> v7, actions/setup-node v4 -> v7,
actions/upload-artifact v4 -> v7 across all workflows.
shivammathur/setup-php stays on the floating @v2 tag, which already
resolves to the latest 2.x release.

.gitea/workflows/build-release.yml

@@ -9,9 +9,9 @@ jobs:
   package:
     runs-on: gitea-runner-server03
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: '24'
 
@@ -29,7 +29,7 @@ jobs:
       - name: Package appstore artifact
         run: make appstore
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: workflow_deck_automation-${{ gitea.ref_name }}
           path: build/artifacts/appstore/*.tar.gz