ci: zipx version updates

[early-effect-zipx]

Applied zipx-cli catalog update and zipxPinUpdate.

Repo-root workflow YAML is not in this PR

The bot cannot push repo-root .github/workflows/ (GITHUB_TOKEN has no workflows permission). Composites under .github/actions/ are already in this commit. Nested example YAML (examples/monorepo/.github/, including that tree's ci.yml) is also in this commit when the companion regenerated it.

If zipxWorkflowCheck fails on repo-root ci.yml (typical after an Action pin bump, especially checkout), regenerate workflows on this PR branch and push. Do not commit those files to main.

From a clone of this repo:

git fetch origin zipx/version-updates-33566233484
git checkout zipx/version-updates-33566233484
sbt zipxWorkflowGenerate
git add .github/workflows
git commit -m "ci: regenerate workflows"
git push origin zipx/version-updates-33566233484

The PR branch is zipx/version-updates-33566233484.