RED-198334 Bump GH Actions off Node 20 (release/7.2)

[gonen-red]

Summary

RED-198334. Cherry-pick of the canonical Node 20 -> Node 24 bump from unstable (#526). Targets release/7.2.

• Bump first-party actions: actions/checkout@v4 -> @v6 (16 sites), actions/upload-artifact@v4 -> @v7 (5 sites), actions/download-artifact@v4 -> @v7
• Bump docker/* actions: setup-buildx v3->v4 (3 sites), login v3->v4 (4 sites), build-push v6->v7 (2 sites)
• Bump dorny/test-reporter v2->v3, peter-evans/create-pull-request v7->v8, iarekylew00t/verified-bot-commit v1->v2

Test plan

• pull-request.yml runs cleanly on this PR
• On next release tag, release_build_and_test.yml produces same image digests with bumped actions

---

Note

Medium Risk
Wide CI pin upgrades affect every PR and release pipeline; failures would block builds/publish but do not change Redis binaries or runtime security paths.

Overview
Cherry-pick for RED-198334 on release/7.2: bumps GitHub Actions across composite actions and workflows so runners use Node 24 instead of deprecated Node 20. No Docker build logic, workflow structure, or Redis image behavior changes—only uses: version pins.

First-party: actions/checkout v4→v6, actions/upload-artifact v4→v7, actions/download-artifact v4→v7.

Docker: docker/setup-buildx-action v3→v4, docker/login-action v3→v4, docker/build-push-action v6→v7.

Third-party: dorny/test-reporter v2→v3, peter-evans/create-pull-request v7→v8, iarekylew00t/verified-bot-commit v1→v2.

Touches PR validation, build/test, release build/test, and release publish paths.

^{Reviewed by Cursor Bugbot for commit 2cf2dd3. Bugbot is set up for automated code reviews on this repo. Configure here.}

[Peter-Sh]

Thanks, I did it by merging your unstable PR into release branches.