fix(ci): upgrade actions/github-script to v8 to support Node 24

Author: sandman-sh

.github/workflows/ci-nudge.yml

@@ -41,7 +41,7 @@ jobs:
           app-id: ${{ secrets.TESTSPRITE_HOB_APP_ID || secrets.ALFHEIM_AGENT_APP_ID }}
           private-key: ${{ secrets.TESTSPRITE_HOB_PRIVATE_KEY || secrets.ALFHEIM_AGENT_PRIVATE_KEY }}
 
-      - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.0.1
+      - uses: actions/github-script@v8
         env:
           APP_TOKEN: ${{ steps.app-token.outputs.token }}
         with:
@@ -51,7 +51,7 @@ jobs:
             const marker = process.env.MARKER;
 
             const appClient = process.env.APP_TOKEN
-              ? require('@actions/github').getOctokit(process.env.APP_TOKEN)
+              ? getOctokit(process.env.APP_TOKEN)
               : null;
             async function write(fn) {
               if (appClient) {

.github/workflows/issue-triage.yml

@@ -49,7 +49,7 @@ jobs:
           # of inheriting the App's full installation permissions.
           permission-issues: write
 
-      - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.0.1
+      - uses: actions/github-script@v8
         with:
           # App token when available (→ testsprite-hob[bot]); else the default
           # GITHUB_TOKEN (→ github-actions[bot]). Either way the logic is identical.

.github/workflows/pr-triage.yml

@@ -61,7 +61,7 @@ jobs:
           app-id: ${{ secrets.TESTSPRITE_HOB_APP_ID || secrets.ALFHEIM_AGENT_APP_ID }}
           private-key: ${{ secrets.TESTSPRITE_HOB_PRIVATE_KEY || secrets.ALFHEIM_AGENT_PRIVATE_KEY }}
 
-      - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.0.1
+      - uses: actions/github-script@v8
         env:
           APP_TOKEN: ${{ steps.app-token.outputs.token }}
         with:
@@ -76,7 +76,7 @@ jobs:
             const author = pr.user.login;
 
             const appClient = process.env.APP_TOKEN
-              ? require('@actions/github').getOctokit(process.env.APP_TOKEN)
+              ? getOctokit(process.env.APP_TOKEN)
               : null;
             // Prefer the App identity; fall back to github-actions[bot] when the
             // App is absent or lacks the Pull-requests permission (403/404).