fix(bear): BOM-root self-skip never matched - exact purl instead of regex-in-substring - #37

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772, docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435, docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/