Use self-hosted mirrors for checkout, setup-node, upload-artifact, and
download-artifact. Pin upload/download to v3 so artifact uploads work on
runners that do not support @actions/artifact v2 (GHES-style); set
download path to the workspace root for the release upload script.