ci: zipx version updates

[github-actions]

Applied zipxDepUpdate, zipxActionUpdate, and zipxPinUpdate.

Repo-root workflow YAML is not in this PR

The bot cannot push repo-root .github/workflows/ (GITHUB_TOKEN has no workflows permission). Composites under .github/actions/ are already in this commit. Nested example YAML (examples/monorepo/.github/, including that tree's ci.yml) is also in this commit when the companion regenerated it.

If zipxWorkflowCheck fails on repo-root ci.yml (typical after an Action pin bump, especially checkout), regenerate workflows on this PR branch and push. Do not commit those files to main.

From a clone of this repo:

git fetch origin zipx/version-updates-32608066543
git checkout zipx/version-updates-32608066543
sbt zipxWorkflowGenerate
git add .github/workflows
git commit -m "ci: regenerate workflows"
git push origin zipx/version-updates-32608066543

The PR branch is zipx/version-updates-32608066543.

[russwyte]

Superseded by #47, which landed the catalog updates (including the ascent-js 0.5.0 eviction fix) on main.