ci: update checkout and setup-python to current majors

[katsugtgz]

User description

Updates the CI workflow to use current GitHub-maintained action versions.

Changes:

• actions/checkout@v4 -> actions/checkout@v7
• actions/setup-python@v4 -> actions/setup-python@v7

Validation:

• workflow YAML parses locally
• the workflow uses no inputs removed in the new majors (no pip-install, no fetch-depth edge cases), and the Python matrix (3.10, 3.11) is supported

Note: both workflow runs for this PR sit in the action_required state, which is the standard first-time-contributor approval gate for fork PRs. They need a maintainer approval to start. Commit author katsugtgz, unsigned.

Scope: .github/workflows/ci.yml only.

---

Generated description

Below is a concise technical summary of the changes proposed in this PR:
Update GitHub Actions checkout and Python setup components to their current major versions across CI and Bandit workflows. Preserve the existing Python matrix, fixed-version setup, and security-scan flow while using actions/checkout@v7 and actions/setup-python@v7.

Topic	Details
CI action upgrades	Modernize repository checkout and Python environment setup for matrix and fixed-version CI jobs while preserving supported Python 3.10 and 3.11 configurations. Modified files (1) .github/workflows/ci.yml Latest Contributors(0) User Commit Date
Security scan checkout	Upgrade the checkout step used before the Bandit security scan to actions/checkout@v7. Modified files (1) .github/workflows/bandit.yml Latest Contributors(0) User Commit Date

Review this PR on Baz
Customize your next review

[baz-reviewer]

Merger

Waiting for CI and review to complete.

Review this PR on Baz

Customize your next review

[katsugtgz]

Sorry for the churn. One more push to complete the set: bandit.yml still had checkout at v2, now v7.