chore(actions): bump actions/upload-artifact from 7.0.1 to 7.0.2

.github/workflows/ci.yml

@@ -280,7 +280,7 @@ jobs:
           grep -Fx 'exit-code=0' "$RUNNER_TEMP/action-summary-output.txt"
       - name: Upload hosted Action summary evidence
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: action-consumer-evidence-${{ github.run_id }}
           path: |
@@ -333,7 +333,7 @@ jobs:
             --arg summarySha256 "$(sha256sum "$SUMMARY_FILE" | cut -d' ' -f1)" \
             '{workflowRunId: $workflowRunId, jobId: $jobId, checkRunId: $checkRunId, annotationCount: $annotationCount, summarySha256: $summarySha256}' \
             > "$RUNNER_TEMP/action-runner-evidence.json"
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: action-runner-evidence-${{ github.run_id }}
           path: ${{ runner.temp }}/action-runner-evidence.json
@@ -372,7 +372,7 @@ jobs:
           SCRIPTSPECT_SOURCE_COMMIT: ${{ github.sha }}
         run: pnpm exec tsx tools/benchmark-workspace.ts "$RUNNER_TEMP/workspace-benchmark.json" 100 2000
       - name: Upload hosted benchmark evidence
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: workspace-benchmark-${{ github.sha }}
           path: ${{ runner.temp }}/workspace-benchmark.json

.github/workflows/corpus.yml

@@ -60,7 +60,7 @@ jobs:
           fi
       - name: Upload draft evidence for maintainer review
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: corpus-draft-${{ github.run_id }}
           path: |

.github/workflows/monthly-evidence.yml

@@ -40,7 +40,7 @@ jobs:
           GITHUB_TOKEN: ${{ github.token }}
       - name: Upload the draft for maintainer review
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: monthly-evidence-draft-${{ github.run_id }}
           path: evidence/

.github/workflows/npm-bootstrap.yml

@@ -218,7 +218,7 @@ jobs:
             > "$RUNNER_TEMP/verified-built-anchor-files.json"
       - name: Persist the exact bootstrap candidate before npm publication
         if: steps.anchor.outputs.recovered != 'true'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: npm-bootstrap-anchor-${{ inputs.version }}-${{ inputs.source-sha }}
           path: |
@@ -318,7 +318,7 @@ jobs:
             grep -Eq 'E404|404 Not Found' "$RUNNER_TEMP/package-name.err"
           fi
       - name: Hand the verified candidate to a fresh publisher runner
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: npm-bootstrap-handoff-${{ github.run_id }}
           path: |
@@ -725,7 +725,7 @@ jobs:
               {initialLatestAssignment: $registryState[0].initialLatestAssignment}
               else {} end)' > "$RUNNER_TEMP/bootstrap/bootstrap-integrity-contract.json"
       - name: Retain bootstrap evidence for maintainer review
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: npm-bootstrap-evidence-${{ inputs.version }}
           path: |

.github/workflows/npm-publish.yml

@@ -793,7 +793,7 @@ jobs:
           fi
 
       - name: Upload the terminal README handoff receipt
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: readme-release-receipt-v${{ needs.publish.outputs.version }}
           path: ${{ runner.temp }}/readme-release-receipt.json

.github/workflows/release.yml

@@ -473,7 +473,7 @@ jobs:
       - name: Retain the candidate before creating tags or releases
         if: steps.recover.outputs.needs-build == 'true'
         id: candidate-upload
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-candidate-${{ needs.authorize.outputs.version }}-${{ github.run_id }}
           path: ${{ runner.temp }}/candidate