Update GitHub Artifact Actions to v7

resources/chaosknoten/auth-dns/zones/diday.org.zone

@@ -1,4 +1,4 @@
-$TTL 3600
+$TTL 3600  ; 1 minutes
 @ SOA auth-dns.hamburg.ccc.de. noc.hamburg.ccc.de. (
     1          ; serial (overwritten by knot automatically)
     10800      ; refresh
@@ -27,7 +27,8 @@ diday.org.                    TXT     "google-site-verification=pJq0LANnNJlkIflK
 diday.org.                    MX      10 cow.hamburg.ccc.de.
 diday.org.                    TXT     "v=spf1 mx ip4:212.12.51.133 ip6:2a00:14b0:f000:23:51:133:0:1 ip4:212.12.48.122 ip6:2a00:14b0:4200:3000:122::1 -all"
 _dmarc.diday.org.             TXT     "v=DMARC1; p=none"
-dkim._domainkey.diday.org.    TXT     "v=DKIM1;k=rsa;t=s;s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2YlBjR5oNm7eDeMXmQF6Izx1A17+vBHNapHlV2Rlj3N4Cjo9kSn0y8rlrqkASUKszDgToGrh1vkHhtYN6EE5QS5iVVSnXcWPiHnBzrxK4OmhVZZtrgGsM17pq9udAEEapc371dQQsL3WhXOvilGGSIQ9u5VDlc+y/ApXi79J6DHSf66t0JUU1e8vLn8ZI8hcXe3nsHXqbW4ot24rk8EvaugsK40jbhqxZ+BrJTBq/iP8w5RsF6KdYjTaqPfr/D4dbvUU6fc8jLyy3OWZgSkkOmv7m0UdbOm2Kk6c+1hNjQJZVEhQrpGrpAcjE37/v8ZNbQMgaasiugH6ElnKb13ZQIDAQAB"
+dkim._domainkey.diday.org.    TXT     "v=DKIM1;k=rsa;t=s;s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2YlBjR5oNm7eDeMXmQF6Izx1A17+vBHNapHlV2Rlj3N4Cjo9kSn0y8rlrqkASUKszDgToGrh1vkHhtYN6EE5QS5iVVSnXcWPiHnBzrxK4OmhVZZtrgGsM17pq9udAEEapc371dQQsL3WhXOvilGGSIQ9u5VDlc+y/ApXi79J6DHSf66t0JUU1e8vLn8ZI8hcXe3nsHXqbW4ot24rk8EvaugsK40jbhqxZ+BrJTBq/iP8w5RsF6KdYjTaqPfr/D4dbvUU6fc8jLyy3OWZgSkkOmv7m0UdbOm2Kk6c+1hNjQJZVEhQrpGrpAcjE37/v8ZNbQMgaasiugH6ElnKb13ZQIDAQAB
+"
 
 events.diday.org.     A       91.98.167.209
 events.diday.org.     AAAA    2a01:4f8:c2c:44b::1

roles/knot/tasks/02-configure.yaml

@@ -33,7 +33,6 @@
     owner: knot
     group: knot
     mode: u=rw,g=r
-    validate: "kzonecheck -v -o '{{ item.domain }}' %s"
 
 # this seems weird but hear me out:
 # if we don't disable SLAAC, the node automatically gets an address based on IPv6 Router-Advertisements