chore(deps): bump actions/attest from 2 to 4

.modonome/snapshot/map.md

@@ -2,7 +2,7 @@
 
 Modonome snapshot. Read this before reading the repo. Tier 0 (signature.json) is the fingerprint: if merkle_root matches your last read, nothing changed. Tier 1 (map.json / map.md) lists modules, public API signatures, import edges, and attention ranking. Cite anchors (F: for files, S: for symbols); each resolves to a path and line so you can act without re-reading the whole repo.
 
-Merkle root: sha256:77f438f5f02372a26baf9b3f1e7ebccf8c303be25ed47f16122ccc4c80ee0f41
+Merkle root: sha256:d53bdc74fcde3893ac173f43e4701316ad8fc5cce826b8a2a74021e258364ec2
 Files: 1029  Bytes: 3805193  Map tokens: 135721/120000
 
 ## Modules

.modonome/snapshot/signature.json

@@ -1 +1 @@
-{"commands":{"build":"","lint":"","test":"npm test"},"entrypoints":["bin/modonome.mjs"],"generated_at":"2026-07-16T02:18:05.384Z","generated_for":"modonome","governance":{"armed":false,"autonomy_enabled":false,"dry_run":true},"instructions":["AGENTS.md","CLAUDE.md","CODEX.md","CONTRIBUTING.md","README.md"],"language_mix":{"(none)":12,"cff":1,"css":50,"diff":18,"html":9,"js":19,"json":139,"jsonl":8,"md":144,"mjs":351,"patch":40,"png":5,"py":4,"sh":1,"svg":2,"tf":4,"toml":2,"ts":61,"tsx":98,"txt":18,"webmanifest":1,"webp":1,"woff2":9,"xml":1,"yaml":9,"yml":22},"merkle_root":"sha256:77f438f5f02372a26baf9b3f1e7ebccf8c303be25ed47f16122ccc4c80ee0f41","preamble":"Modonome snapshot. Read this before reading the repo. Tier 0 (signature.json) is the fingerprint: if merkle_root matches your last read, nothing changed. Tier 1 (map.json / map.md) lists modules, public API signatures, import edges, and attention ranking. Cite anchors (F: for files, S: for symbols); each resolves to a path and line so you can act without re-reading the whole repo.","protected_paths":[".github",".github/CODEOWNERS","package-lock.json"],"schema_version":1,"size":{"bytes":3805193,"files":1029},"snapshot_version":48,"stack":{"name":"Node or TypeScript","pm":"npm"},"tier_hashes":{"map":"sha256:c20fea6d25c684bdfe1869f9bbf38795af8e115fd20319f2a0b9ff74c2aa384b","map_md":"sha256:4b9306d71a881e0734759dd869e5e3d6db6007af9c93a7cb84cbd327f9f91edf"}}
+{"commands":{"build":"","lint":"","test":"npm test"},"entrypoints":["bin/modonome.mjs"],"generated_at":"2026-07-28T03:58:20.333Z","generated_for":"modonome","governance":{"armed":false,"autonomy_enabled":false,"dry_run":true},"instructions":["AGENTS.md","CLAUDE.md","CODEX.md","CONTRIBUTING.md","README.md"],"language_mix":{"(none)":12,"cff":1,"css":50,"diff":18,"html":9,"js":19,"json":139,"jsonl":8,"md":144,"mjs":351,"patch":40,"png":5,"py":4,"sh":1,"svg":2,"tf":4,"toml":2,"ts":61,"tsx":98,"txt":18,"webmanifest":1,"webp":1,"woff2":9,"xml":1,"yaml":9,"yml":22},"merkle_root":"sha256:d53bdc74fcde3893ac173f43e4701316ad8fc5cce826b8a2a74021e258364ec2","preamble":"Modonome snapshot. Read this before reading the repo. Tier 0 (signature.json) is the fingerprint: if merkle_root matches your last read, nothing changed. Tier 1 (map.json / map.md) lists modules, public API signatures, import edges, and attention ranking. Cite anchors (F: for files, S: for symbols); each resolves to a path and line so you can act without re-reading the whole repo.","protected_paths":[".github",".github/CODEOWNERS","package-lock.json"],"schema_version":1,"size":{"bytes":3805193,"files":1029},"snapshot_version":49,"stack":{"name":"Node or TypeScript","pm":"npm"},"tier_hashes":{"map":"sha256:0c5c46d97784b302c52b802bfe224a7a7b5770f5a17454915f0eb7632aabf1a1","map_md":"sha256:e62d5ab0a6516cc16b3e46dc98efd885f6158b98ed6321e5e91065f770cd32fa"}}

action.yml

@@ -89,7 +89,7 @@ runs:
 
     - name: Sign the receipt
       if: ${{ always() && inputs.receipt == 'true' }}
-      uses: actions/attest@v2
+      uses: actions/attest@v4
       with:
         subject-name: gate-integrity
         predicate-type: 'https://modonome.com/attestation/gate-integrity/v1'
@@ -113,7 +113,7 @@ runs:
 
     - name: Sign the AgentProof attestation
       if: ${{ always() && inputs.agentproof == 'true' }}
-      uses: actions/attest@v2
+      uses: actions/attest@v4
       with:
         subject-name: agentproof-conformance
         predicate-type: 'https://modonome.com/attestation/agentproof-conformance/v1'