chore(ci): cascade-internal pass 2 — bump stale inner pins to 99b0048

Second pass after acfb013. cascade-internal detected that
setup-and-install + 3 _local-not-for-reuse workflows had pins
that pointed at SHAs predating the engines.pnpm bump. Bumping
them to 99b0048 (current main).

Manual commit because the script's commit step was killed by
the SOCKET_API_KEY 401 in the pre-commit hook chain (user-
authorized via 'Allow lint bypass').

Author: jdalton

.github/actions/setup-and-install/action.yml

@@ -78,7 +78,7 @@ runs:
         working-directory: ${{ inputs.working-directory }}
 
     - name: Setup environment
-      uses: SocketDev/socket-registry/.github/actions/setup@4bc650438ac95c1d940c92bdb29b87c81201de03 # main (2026-05-15)
+      uses: SocketDev/socket-registry/.github/actions/setup@99b0048469e527273606abd8bb575a9e9d18b304 # main (2026-05-15)
       with:
         debug: ${{ inputs.debug }}
         node-version: ${{ inputs.node-version }}

.github/workflows/_local-not-for-reuse-ci.yml

@@ -17,7 +17,7 @@ permissions:
 jobs:
   ci:
     name: Run CI Pipeline
-    uses: SocketDev/socket-registry/.github/workflows/ci.yml@acfb0136c5c85334783e5e335a78b864e73f4fd9 # main (2026-05-15)
+    uses: SocketDev/socket-registry/.github/workflows/ci.yml@99b0048469e527273606abd8bb575a9e9d18b304 # main (2026-05-15)
     with:
       test-script: 'pnpm run test --all --fast'
       node-versions: '["22", "24"]'

.github/workflows/_local-not-for-reuse-provenance.yml

@@ -31,7 +31,7 @@ permissions:
 
 jobs:
   publish:
-    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@acfb0136c5c85334783e5e335a78b864e73f4fd9 # main (2026-05-15)
+    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@99b0048469e527273606abd8bb575a9e9d18b304 # main (2026-05-15)
     with:
       debug: ${{ inputs.debug }}
       force-registry: ${{ inputs.force-registry }}

.github/workflows/_local-not-for-reuse-weekly-update.yml

@@ -15,7 +15,7 @@ permissions:
 
 jobs:
   weekly-update:
-    uses: SocketDev/socket-registry/.github/workflows/weekly-update.yml@acfb0136c5c85334783e5e335a78b864e73f4fd9 # main (2026-05-15)
+    uses: SocketDev/socket-registry/.github/workflows/weekly-update.yml@99b0048469e527273606abd8bb575a9e9d18b304 # main (2026-05-15)
     with:
       test-setup-script: ''
       test-script: 'pnpm test'