ci: use builder/ci-lite runner groups and bump actions to latest major

Convert self-hosted build jobs to the builder runner group
(group: builder, labels: [self-hosted, x64, builder]) and update GitHub
Actions uses statements to their latest major versions.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: onslaughtq

.github/workflows/build.yml

@@ -10,27 +10,29 @@ defaults:
 jobs:
   build:
     name: Build and push purescript-tools
-    runs-on: [self-hosted, linux, x64]
+    runs-on:
+      group: builder
+      labels: [self-hosted, x64, builder]
     steps:
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Docker buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Docker metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: |
             ghcr.io/flipstone/purescript-tools
@@ -39,7 +41,7 @@ jobs:
             type=raw,value=latest,enable={{is_default_branch}}
 
       - name: Build, tag, and push image to GCR
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           push: true
           tags: ${{ steps.meta.outputs.tags }}