Pin setup-vp to voidzero-dev/setup-vp#52

Use the commit SHA at the head of PR #52 ("fix: surface vp install
errors outside collapsed log group") so install failures on CI/deploy
show up outside the collapsed setup-vp log group. Revert to @v1 once
the PR merges.

Author: fengmk2

.github/workflows/ci.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
-      - uses: voidzero-dev/setup-vp@v1
+      - uses: voidzero-dev/setup-vp@21f6c6e946786aec9726d2fa36b9a53aeca07bbc # PR #52: surface vp install errors
         with:
           cache: true
           registry-url: https://npm.pkg.github.com
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
-      - uses: voidzero-dev/setup-vp@v1
+      - uses: voidzero-dev/setup-vp@21f6c6e946786aec9726d2fa36b9a53aeca07bbc # PR #52: surface vp install errors
         with:
           cache: true
           registry-url: https://npm.pkg.github.com

.github/workflows/deploy.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
-      - uses: voidzero-dev/setup-vp@v1
+      - uses: voidzero-dev/setup-vp@21f6c6e946786aec9726d2fa36b9a53aeca07bbc # PR #52: surface vp install errors
         with:
           cache: true
           registry-url: https://npm.pkg.github.com