ci: encrypt artifacts

[miampf]

Context

Currently, any artifacts uploaded by the CI are unencrypted which can be insecure (e.g. for logs).

Proposed change(s)

• add the action .github/actions/artifact_upload
• add the action .github/actions/artifact_download
• replace all CI references to actions/upload-artifact/actions/download-artifact with their respective wrappers

Checklist

• Add labels (e.g., for changelog category)
• Is PR title adequate for changelog?

[netlify]

✅ Deploy Preview for constellation-docs canceled.

Name	Link
🔨 Latest commit	506398d
🔍 Latest deploy log	https://app.netlify.com/sites/constellation-docs/deploys/6582f1e9f8d6430007f4bde0

[msanft]

Removed the security-fix label as this is rather a defensive security measure on our side and since it interferes with the no-changelog label in the changelog generation process

[msanft]

One general thing: If making as many commits is part of your standard workflow, awesome! If you do this because you think we expect it. No. Feel free to do less commits, don't feel urged by the "guidelines" saying that you should push your work regularly. This is really regular. However, I really don't wan't you to change it if it's part of your default workflow. Just don't feel urged to do that by us :D

[msanft]

Changes look really good to me already other than that :)

[msanft]

LGTM except for the test removal that Paul mentioned.

[malt3]

LGTM

[malt3]

I think this can be merged 🚀

wanted by you