Bump pipeline actions to latest major versions

actions/checkout v4 -> v7, actions/setup-node v4 -> v7,
actions/upload-artifact v4 -> v7 across all workflows.
shivammathur/setup-php stays on the floating @v2 tag, which already
resolves to the latest 2.x release.

.gitea/workflows/build-release.yml

@@ -9,9 +9,9 @@ jobs:
   package:
     runs-on: gitea-runner-server03
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: '24'
 
@@ -29,7 +29,7 @@ jobs:
       - name: Package appstore artifact
         run: make appstore
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: workflow_deck_automation-${{ gitea.ref_name }}
           path: build/artifacts/appstore/*.tar.gz

.gitea/workflows/lint-info-xml.yml

@@ -9,7 +9,7 @@ jobs:
   xml-lint:
     runs-on: gitea-runner-server03
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install xmllint
         run: |

.gitea/workflows/lint-php.yml

@@ -12,7 +12,7 @@ jobs:
       matrix:
         php-version: ['8.2', '8.3', '8.4']
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: shivammathur/setup-php@v2
         with:

.gitea/workflows/phpunit.yml

@@ -9,7 +9,7 @@ jobs:
   unit-tests:
     runs-on: gitea-runner-server03
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: shivammathur/setup-php@v2
         with: