chore(ci): bump socket-registry action refs to main (3362af95)

[John-David Dalton (jdalton)]

Summary

• Cascades the pnpm 11.0.0-rc.0 → 11.0.0-rc.2 bump from socket-registry
• Updates all SocketDev/socket-registry/.github/... pins to the new propagation SHA 3362af95fadd1e325cb48e9ad6daff21c112bd72

Test plan

• CI passes on this branch (reusable workflow pulls new setup action)
• pnpm 11.0.0-rc.2 is installed during setup

---

Note

Low Risk
Low risk config-only change, but CI and release workflows may behave differently if the updated setup-and-install/git-signing actions change Node/pnpm setup or signing behavior.

Overview
Updates GitHub Actions pins to a new SocketDev/socket-registry commit (3362af95…) across ci.yml, provenance.yml, and weekly-update.yml.

This bumps the reusable setup-and-install and git-signing cleanup/setup action refs used by lint/typecheck/tests, publishing, and the weekly dependency update workflow.

^{Reviewed by Cursor Bugbot for commit dfe517d. Configure here.}