Use Node 24-compatible GitHub Actions

[swilla]

Summary

• bump GitHub Actions workflow dependencies to Node 24-compatible majors
• update checkout/composer/cache/artifact actions where present

Verification

• CI will verify this workflow-only change on the PR

---

Note

Low Risk
Workflow-only dependency bumps are low risk; the export change fixes incorrect behavior and is covered by a focused test.

Overview
CI workflows move to Node 24–compatible action majors: actions/checkout@v5 across fix-php-code-style, Larastan, run-tests, and update-changelog, plus ramsey/composer-install@v4 in Larastan.

Course progress export now honors the Builder passed into CourseProgressExport instead of always rebuilding via CourseProgressQueryService::buildQuery(), so Excel downloads from the reporting table respect the same filtered query as the UI. query() is typed to return Builder, and a Pest test asserts the injected query (including filters) is what the export uses.

^{Reviewed by Cursor Bugbot for commit 97f3dfc. Bugbot is set up for automated code reviews on this repo. Configure here.}