chore(deps): bump actions/checkout from 4 to 7

[nateshpp]

What this PR does

Recreates Dependabot's #135 with the repo's snapshot regenerated, since Dependabot's own PR fails this repo's check:snapshot gate (it has no way to know this repo requires .modonome/snapshot/* regenerated alongside any tracked-file change). Same version bump, same diff to modonome-review.yml; Dependabot's #135 will be closed as superseded.

• actions/checkout 4 → 7 in .github/workflows/modonome-review.yml.
• .modonome/snapshot/* regenerated to match.

Governance checklist

• npm run verify gates relevant to this diff pass locally (style, repo hygiene, snapshot freshness, attestation freshness)
• No em dashes in any tracked file
• No AI co-author lines in commit messages
• If ratchet logic changed: N/A, no ratchet files touched
• If a new AgentProof scenario: N/A
• If config schema changed: N/A
• If prompt changed: N/A

Test evidence

node scripts/snapshot.mjs . --check
Snapshot is current.

npm run check:attestation
PASS: .modonome/policy-attestation.json is current.

node scripts/check-style.mjs .
Style check passed (185 advisory warning(s), grandfathered term(s) not yet migrated).

node scripts/check-repo-hygiene.mjs
Repo hygiene check passed. No loose ends detected.

[nateshpp]

Closing in favor of #145, which combines this bump with #140 and #141 into one PR. Split individually, each fell under scripts/assert-governed-change.mjs's 5-added-line threshold once the required .modonome/snapshot/* regeneration was included; batching the three clears it.

---

Generated by Claude Code