ci: bump docker/setup-qemu-action 3→4 and actions/checkout 4→6 (manual rollup of dependabot PRs #4 #5)

Author: knhn1004

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
     name: cli (bun typecheck + tests)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: oven-sh/setup-bun@v2
         with: { bun-version: "1.3" }
       - name: Cache bun
@@ -37,7 +37,7 @@ jobs:
     name: dashboard-ui (typecheck + build)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: oven-sh/setup-bun@v2
         with: { bun-version: "1.3" }
       - name: Cache bun
@@ -57,7 +57,7 @@ jobs:
     name: ledger (cargo test)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
         with: { workspaces: ledger }
@@ -68,7 +68,7 @@ jobs:
     name: control-plane (go vet + go test -race)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-go@v5
         with:
           go-version-file: control-plane/go.mod
@@ -105,7 +105,7 @@ jobs:
     name: gitleaks (secret scan)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with: { fetch-depth: 0 }
       - name: Install gitleaks
         env:

.github/workflows/docker-publish.yml

@@ -23,10 +23,10 @@ jobs:
     name: build & push control-plane image
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Buildx
         uses: docker/setup-buildx-action@v4

.github/workflows/npm-publish.yml

@@ -18,7 +18,7 @@ jobs:
     name: publish @openagentlock/cli
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: actions/setup-node@v4
         with:

.github/workflows/pages.yml

@@ -23,7 +23,7 @@ jobs:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with: { fetch-depth: 0 }
 
       - uses: actions/setup-python@v6