The actions actions/github-script@v8, actions/checkout@v6, actions/setup-node@v6, actions/upload-artifact@v7, and actions/download-artifact@v8 are not allowed in obra/superpowers because all actions must be from a repository owned by obra and pinned to a full-length commit SHA.