chore(ci): bump actions/upload-artifact v4.6.2 → v7.0.1 (#3715) (#3716)

v4.6.2 ships a node20 runtime; GitHub Actions is deprecating Node 20
(removed from runners 2026-09-16). v7.0.1 ships node24 and is the last
Node-20 reference in the repo.

Pinned by full commit SHA per repo convention. Verified v5/v6/v7
breaking changes do not apply: artifact names are unique per workflow
run and neither step uses include-hidden-files.

Closes #3715

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

.github/workflows/install-smoke.yml

@@ -214,7 +214,7 @@ jobs:
 
       - name: Upload lifecycle smoke result on failure
         if: steps.skip.outputs.skip != 'true' && failure() && steps.lifecycle-smoke.outcome == 'failure'
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: release-smoke-${{ matrix.os }}-node${{ matrix.node-version }}
           path: /tmp/release-smoke.json

.github/workflows/test.yml

@@ -231,7 +231,7 @@ jobs:
         run: npm run test:coverage:unit
       - name: Upload coverage artifact
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         with:
           name: coverage-unit
           path: |