ci: bump actions/checkout from 4 to 7

.github/workflows/ci.yml

@@ -45,7 +45,7 @@ jobs:
       run:
         working-directory: apps/orchestrator
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           # gitleaks scans the pushed commit range; a shallow clone can't walk it
           # (surfaces as "failed to scan Git repository: stderr is not empty").
@@ -82,7 +82,7 @@ jobs:
     # before anything else works. Exercise them on the OS they target.
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
@@ -144,7 +144,7 @@ jobs:
       run:
         working-directory: apps/orchestrator
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
@@ -167,7 +167,7 @@ jobs:
       run:
         working-directory: apps/dashboard
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v7
         with:
           node-version: "20"

.github/workflows/codeql.yml

@@ -45,7 +45,7 @@ jobs:
             build-mode: none
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3

.github/workflows/release.yml

@@ -43,7 +43,7 @@ jobs:
       run:
         working-directory: apps/orchestrator
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
@@ -64,7 +64,7 @@ jobs:
     needs: verify
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v7
         with:
           python-version: "3.12"