chore(registry-pins): cascade socket-registry pins → c4b120c3

- 4 registry pins rewritten across 4 workflow files.
- .config/socket-registry-pins.json bumped to c4b120c3.
- Source: socket-registry@c4b120c34fa95a9974ffb3f407fa58f4d167c844.

Author: jdalton

.config/socket-registry-pins.json

@@ -21,7 +21,7 @@ concurrency:
 jobs:
   ci:
     name: Run CI Pipeline
-    uses: SocketDev/socket-registry/.github/workflows/ci.yml@bb4bb872b58d7c97f828caea595ff534b78c507b # main (2026-05-25)
+    uses: SocketDev/socket-registry/.github/workflows/ci.yml@c4b120c34fa95a9974ffb3f407fa58f4d167c844 # main (2026-05-25)
     with:
       # Force --all so push/PR runs the full suite. The default `pnpm test`
       # uses --modified, which is a no-op on a clean CI checkout.

.github/workflows/ci.yml

@@ -39,7 +39,7 @@ permissions:
 
 jobs:
   publish:
-    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@f09a1cd39868ae45d304cfcead2d4f19a5325d8a # main (2026-05-26)
+    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@c4b120c34fa95a9974ffb3f407fa58f4d167c844 # main (2026-05-26)
     with:
       debug: ${{ inputs.debug }}
       dist-tag: ${{ inputs.dist-tag }}

.github/workflows/provenance.yml

@@ -54,7 +54,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 (2025-08-15)
 
       - name: Setup + install
-        uses: SocketDev/socket-registry/.github/actions/setup-and-install@f09a1cd39868ae45d304cfcead2d4f19a5325d8a # main (2026-06-01)
+        uses: SocketDev/socket-registry/.github/actions/setup-and-install@c4b120c34fa95a9974ffb3f407fa58f4d167c844 # main (2026-06-01)
 
       - name: Stage + publish
         env:

.github/workflows/publish-cross-org.yml

@@ -25,7 +25,7 @@ permissions:
 
 jobs:
   weekly-update:
-    uses: SocketDev/socket-registry/.github/workflows/weekly-update.yml@bb4bb872b58d7c97f828caea595ff534b78c507b # main (2026-05-25)
+    uses: SocketDev/socket-registry/.github/workflows/weekly-update.yml@c4b120c34fa95a9974ffb3f407fa58f4d167c844 # main (2026-05-25)
     with:
       # Set to 'true' when the repo tracks submodules.
       checkout-submodules: 'false'