The docs contain a confusing sequence in https://spack.readthedocs.io/en/latest/getting_started.html#bootstrapping-clingo:

• "If for security concerns you cannot bootstrap clingo from pre-built binaries, you have to disable fetching the binaries we generated with Github Actions."
• code-block spack bootstrap disable
• "You can verify that the new settings are effective with:"
• command-output spack bootstrap list

Because the command-output is run, and the spack bootstrap disable is NOT run, this results in the spack bootstrap list showing the disabled resources as enabled.

This PR reorders the text so the spack bootstrap list output is introduced first (as command-output), and the verification step is a reference to the same command. (Also updated github-actions versions to current.)