fix(ci): correct deploy-pages and upload-pages-artifact SHA pins

- deploy-pages: v4.0.5 (wrong SHA) → v5.0.0 (cd2ce8f)
- upload-pages-artifact: v3.0.1 → v4.0.0 (7b1f4a7)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: williamzujkowski

.github/workflows/deploy-site.yml

@@ -45,7 +45,7 @@ jobs:
         run: pnpm --filter @civic-source/web build
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1
+        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4.0.0
         with:
           path: apps/web/dist
 
@@ -58,4 +58,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac553fd0d31 # v4.0.5
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0