ci(backport): Update GitHub Actions

[matthewfeickert]

Description

• Backport:
  • PR build(deps): bump actions/configure-pages from 3 to 4 #2387
  • PR build(deps): bump actions/deploy-pages from 2 to 3 #2388
  • PR build(deps): bump pypa/gh-action-pypi-publish from 1.8.10 to 1.8.11 #2389
  • PR build(deps): bump actions/setup-python from 4 to 5 #2400
  • PR build(deps): bump actions/download-artifact from 3 to 4 #2403
  • PR build(deps): bump actions/upload-artifact from 3 to 4 #2404
  • PR build(deps): bump github/codeql-action from 2 to 3 #2405
  • PR build(deps): bump actions/deploy-pages from 3 to 4 #2409
  • PR build(deps): bump actions/upload-pages-artifact from 2 to 3 #2410
  • PR ci: Group dependabot updates #2413

Checklist Before Requesting Reviewer

• Tests are passing
• "WIP" removed from the title of the pull request
• Selected an Assignee for the PR to be responsible for the log summary

Before Merging

For the PR Assignees:

• Summarize commit messages into a comprehensive review of the PR

* Backport:
   - PR https://github.com/scikit-hep/pyhf/pull/2387
   - PR https://github.com/scikit-hep/pyhf/pull/2388
   - PR https://github.com/scikit-hep/pyhf/pull/2389
   - PR https://github.com/scikit-hep/pyhf/pull/2400
   - PR https://github.com/scikit-hep/pyhf/pull/2403
   - PR https://github.com/scikit-hep/pyhf/pull/2404
   - PR https://github.com/scikit-hep/pyhf/pull/2405
   - PR https://github.com/scikit-hep/pyhf/pull/2409
   - PR https://github.com/scikit-hep/pyhf/pull/2410
   - PR https://github.com/scikit-hep/pyhf/pull/2413