fix(ci): update deprecated GH Actions (scorecard)

Updates `ossf/scorecard-action` from `v2` to `v2.4.0` and
`actions/upload-artifact` from `v3` to `v4` to comply with GitHub's
deprecation notice
(https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions).

As of January 22, 2025, workflows using v3 artifact actions fail with:
```
##[error]This request has been automatically failed because it uses a
deprecated version of `actions/upload-artifact: v3`. Learn more:
https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/.
```

.github/workflows/scorecard.yml

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index fa75f38..0c2255e 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -40,7 +40,7 @@
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@v2
+        uses: ossf/scorecard-action@v2.4.0
         with:
           results_file: results.sarif
           results_format: sarif
@@ -62,7 +62,7 @@
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: SARIF file
           path: results.sarif