chore(workflows): migrate to SOCKET_API_TOKEN canonical input

Reusable workflow now declares SOCKET_API_TOKEN as primary
(SOCKET_API_KEY kept as deprecated alias for one cycle). Update
the LHS to the canonical name; RHS `secrets.X` reference stays
as the repo's actual GitHub-side secret name.

Author: jdalton

.github/workflows/provenance.yml

@@ -36,4 +36,4 @@ jobs:
       setup-script: 'ci:validate'
       use-trusted-publishing: true
     secrets:
-      SOCKET_API_KEY: ${{ secrets.SOCKET_API_TOKEN }}
+      SOCKET_API_TOKEN: ${{ secrets.SOCKET_API_TOKEN }}