Upgrade and pin GitHub Actions

[GordonBeeming]

Summary

• upgrade both checkout steps from actions/checkout@v4 to v7.0.0
• pin both references to the immutable v7.0.0 commit SHA
• retain the readable release version in an inline comment
• add a near-top README link to the companion menu bar app

Why

Checkout v4 uses the deprecated Node 20 runtime and now emits a GitHub Actions warning. Pinning the Node 24-based v7 release by commit SHA removes that warning and prevents mutable tags from changing the action code unexpectedly.

The reciprocal README note also helps people find the equivalent app when they use the other coding assistant.

Validation

• actionlint
• YAML parse check
• git diff --check
• repository-wide scan confirmed every uses: reference is pinned to a full SHA

[gemini-code-assist]

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

[Copilot]

Pull request overview

This PR updates the GitHub Actions workflow to use actions/checkout v7.0.0 pinned by immutable commit SHA, eliminating runtime deprecation warnings and avoiding mutable tag drift.

Changes:

• Replaced both actions/checkout@v4 usages with the v7.0.0 commit SHA.
• Kept the human-readable version as an inline comment next to the pinned SHA.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[GordonBeeming]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Hooray!

Reviewed commit: c28d6f7270

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".