GitHub and Gitea Actions workflows

Create workflows that fit the repository's actual CI platform and keep every external action current, supported, and as immutable as the platform allows. Action references execute third-party code with the workflow's available credentials, so version freshness and provenance are part of implementation, not optional cleanup.

Required fresh version and security research

Before creating or changing a workflow, look up each external action in the current task. Do not rely on model memory, old workflow examples, cached recommendations, or a version supplied by the user without checking it.

For each action: