build(deps): bump typos, editorconfig-checker, markdownlint-cli2, check-jsonschema defaults

[kyle-sexton]

Four tool defaults in the composite actions at v0.29.1 (0d3e6a6f3851cf678f82fa9a8a17f10faa909ac9) trail their latest upstream releases:

Tool	Action	v0.29.1 default	Latest upstream
typos	.github/actions/typos	1.50.1	1.50.3
editorconfig-checker	.github/actions/editorconfig	3.11.2	4.0.2 (major)
markdownlint-cli2	.github/actions/markdown	0.23.2	0.23.3
check-jsonschema	.github/actions/check-jsonschema	0.38.0	0.38.2

gitleaks 8.30.1, lychee 0.24.2, actionlint 1.7.12 and shellcheck 0.11.0 are already current.

Consumers such as melodic-software/.github pin their local tool installs (.cursor/install.sh) to these defaults so local checks match CI, so the bump has to land here rather than downstream. editorconfig-checker 4.x is a major version; check its release notes for config or CLI changes before bumping.

Found during the hygiene sweep in melodic-software/.github#153.

🤖 Generated with Claude Code

[kyle-sexton]

Status: typos and check-jsonschema landed in #631, and editorconfig-checker 4.0.2 in #632 (released in v0.30.0). The markdownlint-cli2 bump to 0.23.3 is still open. Per the pin rule in .github/actions/markdown/action.yml, it follows standards: that repo's Dependabot (npm, weekly, 7-day cooldown, .github/dependabot.yml:33-47) had not opened the 0.23.3 PR as of 2026-09-28, and standards package.json is still at 0.23.2. Once it merges there, bump the action default and the $schema URL in .markdownlint-cli2.jsonc together, then close this issue.