Float ci.yml's actions on major tags to match the kit's Dependabot config #120

The kit's dependabot.yml variant for this repo ignores minor and patch bumps of actions/*, because kit workflows float on major tags (@v7). This repo's own ci.yml pins exact versions (actions/checkout@v7.0.1, actions/setup-node@v7.0.0), so once the next wave lands it stops getting patch updates.

• Move ci.yml (and any other workflow here that pins actions/* or anthropics/* to a patch) to the major tag, e.g. actions/checkout@v7.

from: workflows, todo-sweep branch (#89)