Recovery editor note + refresh CI action pins + scaffold M15 merge (#43,#44,#50) (#66)

Co-authored-by: claude <claude@jpaul.io>
Co-committed-by: claude <claude@jpaul.io>

modules/15-security-scanning/lab/ci-security.yml

@@ -22,12 +22,12 @@ jobs:
     runs-on: ubuntu-latest   # or your self-hosted runner label (Module 19)
     steps:
       - name: Check out the code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         # Secret scanning cares about history. If your tool scans commits (not just the working
         # tree), fetch full history here — e.g. set `with: { fetch-depth: 0 }`.
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.x"