chore(deps): Update actions/upload-artifact to v7 and fix OSSF scorecard PR trigger

[Copilot]

Proposed changes

Bumps actions/upload-artifact from v6.0.0 to v7.0.0 in the OSSF scorecard workflow. Additionally, the OSSF scorecard workflow was never triggered on PRs, meaning dependency updates to actions within it were never validated in CI before merge.

• ossf_scorecard.yml: Bump actions/upload-artifact to v7.0.0
• ossf_scorecard.yml: Add pull_request trigger (targeting main/master) to exercise the full workflow — and its action dependencies — on PRs

Checklist

Before creating a PR, run through this checklist and mark each as complete:

• I have read the contributing guidelines.
• I have signed the F5 Contributor License Agreement (CLA).
• If applicable, I have added tests that prove my fix is effective or that my feature works.
• If applicable, I have checked that any relevant tests pass after adding my changes.
• I have updated any relevant documentation (README.md and/or CHANGELOG.md).

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[github-actions]

✅ All required contributors have signed the F5 CLA for this PR. Thank you!
_{Posted by the CLA Assistant Lite bot.}

[alessfg]

@copilot can you rebase this PR?

[Copilot]

@copilot can you rebase this PR?

I'm unable to perform a rebase — rebasing rewrites commit history and requires a force push, which isn't available to me. You can rebase manually with:

git fetch origin
git checkout copilot/sub-pr-136
git rebase origin/renovate/major-github-actions
git push --force-with-lease origin copilot/sub-pr-136

[alessfg]

@copilot can you recreate this PR instead?

[Copilot]

@copilot can you recreate this PR instead?

I'm unable to recreate the PR — that would require either opening a new PR or squashing commits with a force push, neither of which is available to me.

The branch is already correctly based on the current state of renovate/major-github-actions (same file SHA 13ee5fc). The only issue is the extra empty "Initial plan" commit in the history. If you'd like a clean single-commit PR, you could:

1. Close this PR
2. Create a new branch from renovate/major-github-actions
3. Apply the single change (adding pull_request trigger to ossf_scorecard.yml)
4. Open a new PR

Or you can squash-merge this PR when it's approved, which will produce the same clean result.

[alessfg]

@copilot resolve the merge conflicts in this pull request

[Copilot]

@copilot resolve the merge conflicts in this pull request

Resolved the merge conflicts by merging origin/main into the branch. The only conflict was in ossf_scorecard.yml where actions/upload-artifact diverged (v7.0.0 on our branch vs v7.0.1 on main). Took the newer v7.0.1 from main while preserving the pull_request trigger addition.