ci(ci): update workflow

[Fdawgs]

This PR:

• Removes Git credentials after checkout as a security precaution by setting persist-credentials to false. They are not used after the initial checkout, and this stops them from accidentally leaking through a script; see related GitHub security post and related actions/checkout issue
• Set check-latest to true, so that the actions/setup-node will check it is using the latest minor or hotfix Node version and use that instead of its cached version, this stops an issue like with 22.5.0 that introduced a regression and actions were still using that instead of 22.5.1
• Updates actions to their latest major versions; only real change is that they're using Node 20 instead of Node 16

Checklist

• commit message and code follows the Developer's Certification of Origin
  and the Code of conduct

[netlify]

✅ Deploy Preview for agitated-mahavira-26f8f9 canceled.

Name	Link
🔨 Latest commit	40a4451
🔍 Latest deploy log	https://app.netlify.com/sites/agitated-mahavira-26f8f9/deploys/67ec071a2057370008a8b157

[galvez]

LGTM