chore(ci): bump Node 20 actions to Node 24 and SHA-pin

Replaces mutable tags with full commit SHAs (per CI/CD hardening
policy) and upgrades each action to the latest Node 24-based
release, resolving GitHub's Node 20 deprecation annotation
(forced switch 2026-06-02, removal 2026-09-16).

- actions/checkout: @v4 → @de0fac2… # v6.0.2
- denoland/setup-deno: @v2 → @667a34c… # v2.0.4
- stefanzweifel/git-auto-commit-action: @v5 → @04702ed… # v7.1.0
- actions/configure-pages: @v5 → @45bfe01… # v6.0.0
- actions/upload-pages-artifact: @V3 → @fc324d3… # v5.0.0
- actions/deploy-pages: @v4 → @cd2ce8f… # v5.0.0

The workflow uses only documented, stable inputs (ref, fetch-depth,
path, commit_message, status_options) that are unchanged across
these major version bumps.

Closes #3

InfoSec: dependency upgrade to restore supported runtime before
EOL; SHA pinning prevents surprise changes from mutable-tag
resolution. No new permissions, secrets, or input surface.

Author: RickCogley

.github/workflows/update-profile-readme.yml

@@ -26,14 +26,14 @@ jobs:
     steps:
       - name: Clone repository
         # Git clone the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: ${{ github.head_ref }}
           fetch-depth: "0" # Fetch all history for git
 
       - name: Setup Deno environment
         # Downloads deno and caches it
-        uses: denoland/setup-deno@v2
+        uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4
         with:
           # Latest Deno 2.x version
           deno-version: v2.x
@@ -46,19 +46,19 @@ jobs:
 
       - name: Commit changes
         # Commit the changes to the repository
-        uses: stefanzweifel/git-auto-commit-action@v5
+        uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7.1.0
         with:
           commit_message: Apply changes during gh actions build
           status_options: "--untracked-files=no"
 
       - name: Setup Pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
         with:
           path: "_site"
 
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0