[github-actions]

The matrix of the integration tests runs older patch releases than are available. This raises it and adds the SHA-256 of each package to tests/ci/joomla-checksums.sha256.

• 5.4.8 -> 5.4.10: SHA-256 aa72c425105cf775312f9610598b9f1c8866c7f3219a729b59d29a56ff7f76c4, the same as the digest GitHub lists for the release asset.
• 6.1.3 -> 6.1.4: SHA-256 9558a3a3754cbe798c8a8b3d46afa4e4a0a9284de876e4ce82c0ccaeb9f4af41, the same as the digest GitHub lists for the release asset.

Before merging, please compare the MD5/SHA1 of each package with the ones on https://downloads.joomla.org (the page of the version lists them): the SHA-256 comes from the GitHub release, not from Joomla's own page.

• The entries of the previous versions stay in the checksum file: the com_bfstop workflow installs through the same file. Remove them once both repositories have moved on.
• com_bfstop has its own matrix; raise it there if you want the same versions.
• This branch (joomla-versions) is rewritten by the weekly job while the pull request is open. A push made with the workflow's token doesn't start the pull_request workflows, so the job starts ci.yml on the branch itself; its runs are listed on the branch's latest commit.

Opened by https://github.com/codeling/bfstop/actions/runs/40539542711