Merge Renovate: deps: Update CI actions

# Conflicts:
#	.forgejo/workflows/deploy.yaml

.forgejo/workflows/deploy.yaml

@@ -108,7 +108,7 @@ jobs:
       # Read-only DB role and S3 key (see CLAUDE.md); the asxp.io admin
       # owns writes. BINGO_HOST also feeds the Traefik rule via compose.
       - name: Deploy .env from secrets
-        uses: appleboy/ssh-action@v1.2.3
+        uses: appleboy/ssh-action@v1.2.5
         env:
           BINGO_DB_PASSWORD: ${{ secrets.BINGO_DB_PASSWORD }}
           BINGO_S3_ACCESS_KEY: ${{ secrets.BINGO_S3_ACCESS_KEY }}
@@ -152,7 +152,7 @@ jobs:
             chmod 600 /opt/datacenterbingo/.env
 
       - name: Deploy and update container
-        uses: appleboy/ssh-action@v1.2.3
+        uses: appleboy/ssh-action@v1.2.5
         env:
           NEW_IMAGE: ${{ needs.build.outputs.image_tag }}
         with: