Bump github actions to use newer node

[timkpaine]

We are currently using some older GitHub actions that raise deprecation warnings, to avoid disruption to CI this PR upgrades them to newer versions.

This PR also limits the node upper bound to 22 to avoid the assert { type: "json" } / with { type: "json" } change (proposal here https://github.com/tc39/proposal-import-attributes/pull/131 ) which affects Node 22.

[texodus]

Build fails

NPM package.json engines field syntax does not use commas

[texodus]

I've cherry-picked this into #2623, as this needs rebasing and a new set of branch protections for the new box names, closing.