ci: improve submodule and LFS handling in workflows

.github/workflows/release.yml

@@ -8,9 +8,16 @@ jobs:
     runs-on: macos-26
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
-          submodules: 'true'
+          submodules: 'recursive'
+          persist-credentials: false
+
+      - name: Pull Git LFS assets for IDeviceKitten
+        run: |
+          git config --global --unset-all http.https://github.com/.extraheader || true
+          git -C IDeviceKitten config --unset-all http.https://github.com/.extraheader || true
+          git -C IDeviceKitten lfs pull
 
       - name: Use Xcode 26.2
         run: |

.github/workflows/update_repo.yml

@@ -9,14 +9,14 @@ jobs:
     runs-on: macos-15
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
 
       - name: Update app-repo.json
         run: |
           ./update-repo.sh
 
       - name: Commit changes
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@v10
         with:
           default_author: github_actions
           message: "chore: update repo"

.gitmodules

@@ -1,7 +1,7 @@
 [submodule "Zsign"]
 	path = Zsign
-	url = https://github.com/khcrysalis/Zsign-Package
+	url = https://github.com/CLARATION/Zsign-Package
 	branch = package
 [submodule "IDeviceKitten"]
 	path = IDeviceKitten
-	url = https://github.com/khcrysalis/IDeviceKit
+	url = https://github.com/CLARATION/IDeviceKit