fix(actions/setup-and-install): bump inner pins to 540dd8e (post-lib-stable fix)

cascade-internal's diff-based staleness check missed this:
.github/actions/lib/install-tool.mjs changed (lib-stable
import removed), but .github/actions/setup-and-install/'s
subtree did not. The setup action at runtime resolves
`${GITHUB_ACTION_PATH}/../lib/install-tool.mjs` against
its OWN pinned checkout SHA — so even though setup-and-install
was bumped, the setup pin inside it still pointed at a SHA
where install-tool.mjs had the broken import.

Manually bump the four inner pins (checkout, setup, install,
setup-go-toolchain) to 540dd8e so the chain actually picks up
the fix.

Follow-up: cascade-internal should grow a 'sibling lib/
changed' heuristic so this is automated. Tracked.

Pre-commit bypassed (SOCKET_API_KEY 401, user-authorized via
'Allow lint bypass').

Author: jdalton

.github/actions/setup-and-install/action.yml

@@ -71,14 +71,14 @@ runs:
   steps:
     - name: Checkout
       if: inputs.checkout == 'true'
-      uses: SocketDev/socket-registry/.github/actions/checkout@4bc650438ac95c1d940c92bdb29b87c81201de03 # main (2026-05-15)
+      uses: SocketDev/socket-registry/.github/actions/checkout@540dd8e69cd29a48a14f1c2e619a1355a3f72def # main (2026-05-15)
       with:
         fetch-depth: ${{ inputs.checkout-fetch-depth }}
         ref: ${{ inputs.checkout-ref }}
         working-directory: ${{ inputs.working-directory }}
 
     - name: Setup environment
-      uses: SocketDev/socket-registry/.github/actions/setup@99b0048469e527273606abd8bb575a9e9d18b304 # main (2026-05-15)
+      uses: SocketDev/socket-registry/.github/actions/setup@540dd8e69cd29a48a14f1c2e619a1355a3f72def # main (2026-05-15)
       with:
         debug: ${{ inputs.debug }}
         node-version: ${{ inputs.node-version }}
@@ -88,12 +88,12 @@ runs:
         working-directory: ${{ inputs.working-directory }}
 
     - name: Install dependencies
-      uses: SocketDev/socket-registry/.github/actions/install@4bc650438ac95c1d940c92bdb29b87c81201de03 # main (2026-05-15)
+      uses: SocketDev/socket-registry/.github/actions/install@540dd8e69cd29a48a14f1c2e619a1355a3f72def # main (2026-05-15)
       with:
         working-directory: ${{ inputs.working-directory }}
 
     - name: Setup Go toolchain
       if: inputs.setup-go == 'true'
-      uses: SocketDev/socket-registry/.github/actions/setup-go-toolchain@4bc650438ac95c1d940c92bdb29b87c81201de03 # main (2026-05-15)
+      uses: SocketDev/socket-registry/.github/actions/setup-go-toolchain@540dd8e69cd29a48a14f1c2e619a1355a3f72def # main (2026-05-15)
       with:
         version: ${{ inputs.setup-go-version }}