Upgrade GitHub Actions for Node 24 compatibility

Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>

Author: salmanmkc

.github/workflows/bot-detection.md

@@ -31,7 +31,7 @@ jobs:
     steps:
       - name: Precompute deterministic findings
         id: precompute
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.GH_AW_BOT_DETECTION_TOKEN || secrets.GITHUB_TOKEN }}
           script: |

.github/workflows/daily-syntax-error-quality.md

@@ -33,7 +33,7 @@ timeout-minutes: 20
 strict: true
 steps:
   - name: Setup Go
-    uses: actions/setup-go@v5
+    uses: actions/setup-go@v6
     with:
       go-version-file: go.mod
       cache: true

.github/workflows/hourly-ci-cleaner.md

@@ -50,7 +50,7 @@ jobs:
       ci_run_id: ${{ steps.ci_check.outputs.ci_run_id }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           persist-credentials: false
       - name: Check last CI workflow run status on main branch

.github/workflows/release.md

@@ -51,7 +51,7 @@ jobs:
 
       - name: Compute release configuration
         id: compute_config
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const releaseType = context.payload.inputs.release_type;
@@ -172,7 +172,7 @@ jobs:
           echo "✓ Tag created: $RELEASE_TAG"
           
       - name: Setup Go
-        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
+        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417  # v6.3.0
         with:
           go-version-file: go.mod
           cache: false  # Disabled for release security - prevent cache poisoning attacks

.github/workflows/super-linter.md

@@ -73,7 +73,7 @@ jobs:
           retention-days: 7
 steps:
   - name: Download super-linter log
-    uses: actions/download-artifact@v6
+    uses: actions/download-artifact@v7
     with:
       name: super-linter-log
       path: /tmp/gh-aw/