ci: upgrade codeql-action/upload-sarif to v4

v3 emits a deprecation warning and is scheduled for removal in December
2026. v4 runs on the Node.js 24 runtime.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: Dibran Mulder

.github/workflows/delivery.yml

@@ -63,7 +63,7 @@ jobs:
           output-format: sarif
 
       - name: Upload Anchore scan SARIF report
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         if: ${{ !cancelled() }}
         with:
           sarif_file: ${{ steps.scan.outputs.sarif }}