ci: update checkout action to v7

[steipete]

Summary

• update both workflows from actions/checkout@v6 to actions/checkout@v7

The current stable release keeps the Node 24 runtime already required by v6 and adds a safety guard for fork checkouts in privileged event types. CrawlBar uses only compatible push, pull_request, and workflow_dispatch paths.

Upstream: https://github.com/actions/checkout/releases/tag/v7.0.0

Verification

• actionlint
• Codex autoreview: clean
• exact workflow execution required before merge

No application runtime or external service boundary changes.

[clawsweeper]

ClawSweeper status: review started.

I am starting a fresh review of this pull request: ci: update checkout action to v7 This is item 1/1 in the current shard. Shard 0/1.

This placeholder means the worker is alive and reading the current context. I will edit this same comment with the actual review when the claws are done clicking.

Crustacean status: shell secured, claws on keyboard, evidence pebbles being sorted.

[steipete]

Landed as 70d618db2a8bb712ff7dad4ae2e6d21b44604c5b.

Verification:

• actionlint
• exact-head CI, including checkout, build, self-test, CLI smoke, packaging, and packaged CLI smoke: https://github.com/openclaw/crawlbar/actions/runs/27820863685
• Codex autoreview: no actionable findings

The workflow ran successfully with actions/checkout@v7; no application or authenticated external-service boundary changed.