🔧 Fix stale GitHub Actions SHAs 🔧

All pinned action SHAs were outdated; GitHub couldn't resolve them,
causing both CI and Release workflows to fail at job setup.
- .github/workflows/ci.yml: update actions/checkout → v6.0.2,
docker/setup-buildx-action → v4.0.0, docker/login-action → v4.1.0,
docker/metadata-action → v6.0.0, docker/build-push-action → v7.1.0
- .github/workflows/release.yml: same action updates plus
softprops/action-gh-release → v3.0.0

.github/workflows/ci.yml
.github/workflows/release.yml

.github/workflows/ci.yml

@@ -15,18 +15,18 @@ jobs:
     name: Build image
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
-      - uses: docker/setup-buildx-action@b5730e1a0a27db01e64c4ab5f4f7c8a63c1de14a  # v3.10.0
+      - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd  # v4.0.0
 
-      - uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772  # v3.4.0
+      - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121  # v4.1.0
         if: github.event_name != 'pull_request'
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: docker/metadata-action@902fa8ec7d6ecbea8a986b37db18de1c4e72470b  # v5.7.0
+      - uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf  # v6.0.0
         id: meta
         with:
           images: ghcr.io/${{ github.repository_owner }}/${{ github.event.repository.name }}
@@ -45,7 +45,7 @@ jobs:
             org.opencontainers.image.vcs-type=Git
             com.github.containers.toolbox=false
 
-      - uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1  # v6.16.0
+      - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f  # v7.1.0
         with:
           context: .
           file: docker/Dockerfile