deps: batch update 8 dependencies

[wesm]

Summary

Consolidates the following dependabot updates:

• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 #641 -- bump actions/upload-artifact from 7.0.0 to 7.0.1
• build(deps): bump cachix/install-nix-action from 31.10.3 to 31.10.4 #642 -- bump cachix/install-nix-action from 31.10.3 to 31.10.4
• build(deps): bump github.com/mattn/go-runewidth from 0.0.22 to 0.0.23 #643 -- bump github.com/mattn/go-runewidth from 0.0.22 to 0.0.23
• build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 #644 -- bump softprops/action-gh-release from 2.6.1 to 3.0.0
• build(deps): bump github.com/charmbracelet/x/ansi from 0.11.6 to 0.11.7 #645 -- bump github.com/charmbracelet/x/ansi from 0.11.6 to 0.11.7
• build(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21 #646 -- bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21
• build(deps): bump modernc.org/sqlite from 1.48.1 to 1.48.2 #647 -- bump modernc.org/sqlite from 1.48.1 to 1.48.2
• build(deps): bump golang.org/x/term from 0.41.0 to 0.42.0 #648 -- bump golang.org/x/term from 0.41.0 to 0.42.0

Closes #641, #642, #643, #644, #645, #646, #647, #648

[roborev-ci]

roborev: Combined Review (2c38d28)

Verdict: No Medium, High, or Critical findings; the reviewed dependency and vendorHash updates look clean based on all three review outputs.

---

Synthesized from 3 reviews (agents: codex, gemini | types: default, security)