chore(deps): bump actions/checkout from 4 to 6 (#72)

* chore(deps): bump actions/checkout from 4 to 6

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(ci): skip gate-passed check for bot PRs

Dependabot PRs cannot run kanon gate locally, so the Gate-Passed
trailer check fails unconditionally. Skip the verification step
when the PR author is a bot.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Gate-Passed: kanon v0.1.0 (menos, 2026-03-26T19:00:56-05:00)
Gate-Checks:

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Cody Kickertz <cody@forkwright.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: 3 people

.github/workflows/gate-verify.yml

@@ -11,11 +11,23 @@ jobs:
   verify-gate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
+      - name: Check for bot PR
+        id: bot-check
+        run: |
+          author="${{ github.event.pull_request.user.login }}"
+          if [[ "$author" == *"[bot]" || "$author" == "dependabot"* ]]; then
+            echo "skip=true" >> "$GITHUB_OUTPUT"
+            echo "Skipping gate check for bot author: $author"
+          else
+            echo "skip=false" >> "$GITHUB_OUTPUT"
+          fi
+
       - name: Verify Gate-Passed trailer
+        if: steps.bot-check.outputs.skip != 'true'
         run: |
           commits=$(git log --format="%H" origin/main..HEAD)
           if [ -z "$commits" ]; then