Composite recipe to migrate off 3rd party actions to official ones and the latest versions

[greg-at-moderne]

What problem are you trying to solve?

Over the years you can easily end up using a big soup of 3rd party actions in some old versions. These days a lot of the functionality is provided by 1st party actions from GitHub themselves.

Describe the solution you'd like

Devise a recipe which:

• migrates known cases of replacements, e.g. MigrateTibdexGitHubAppTokenToActions
• upgrades to the latest major version of the official actions

[timtebeek]

Triage note — the building blocks for this already exist, so this is mostly an aggregation + inventory issue:

• org.openrewrite.github.UpgradeOfficialGitHubActions already handles "upgrade actions/* and github/* to their latest major"
• org.openrewrite.github.ChangeAction is the primitive for each third-party → official rename
• org.openrewrite.github.MigrateTibdexGitHubAppTokenToActions is the worked example of one such migration

What is missing is (a) the composite recipe that lists them and (b) the inventory of known third-party → official replacements worth encoding. Some candidates beyond tibdex:

• styfle/cancel-workflow-action → native concurrency: (see Rewrite AutoCancelInProgressWorkflow to use built in cancellation #60)
• gradle/wrapper-validation-action → gradle/actions/wrapper-validation (already have RenameWrapperValidationAction)
• gradle/gradle-build-action → gradle/actions/setup-gradle (already have RenameGradleBuildActionToSetupGradle)

The two Gradle renames could simply be pulled into the composite as-is.