ci(deploy): update actions to latest major versions

[Fdawgs]

This PR:

• Removes Git credentials after checkout as a security precaution by setting persist-credentials to false. They are not used after the initial checkout, and this stops them from accidentally leaking through a script; see related GitHub security post and related actions/checkout issue
• Set check-latest to true, so that the actions/setup-node will check it is using the latest minor or hotfix Node version and use that instead of its cached version, this stops an issue like with 22.5.0 that introduced a regression and actions were still using that instead of 22.5.1
• Updates actions to their latest major versions; only real change is that they're using Node 20 instead of Node 16

Checklist

• commit message and code follows the Developer's Certification of Origin
  and the Code of conduct