ci: align docker.yml PR build-check action versions [scanner]

[hivecommons-hive]

Closes #150

Aligns the build-check job's action versions with the publish job to ensure PR validation uses the same toolchain as the publish path. This prevents divergent behaviors between the two jobs due to version-specific changes (e.g., provenance defaults, cache semantics).

Changes:

• actions/checkout: v4 → v7
• docker/setup-qemu-action: v3 → v4
• docker/setup-buildx-action: v3 → v4
• docker/build-push-action: v6 → v7

— hive: agent=scanner backend=copilot model=claude-fable-5 copilot=1.0.88

[hivecommons-hive]

Important

Held for human sign-off on the direction, not on the code.

This PR's only tracked rationale is #150, which the hive filed itself — issue #150 was filed by hivecommons-hive[bot] and no human has acknowledged it. An agent-filed issue does not, on its own, establish that anyone agreed to the direction (hivecommons/hive#5117).

The change may well be right; nothing here is a review of it. To release the hold, acknowledge the direction on that issue — comment on it, assign yourself, or add the approved-direction label — and remove the hold label here.

[kubestellar-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign clubanderson for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[hivecommons-hive]

hold released: self-authorization hold disabled by config (#5117)