ci: bump 2 stale action pins (denoland/setup-deno v2.0.3→v2.0.4, haskell-actions/setup v2.10.3→v2.11.0)

Caught during the wider standards SHA-pin audit triggered by the
rsr-template-repo fake-SHA cleanup arc. Both pins are real — just older
than the rest of the estate now uses post-#289 (setup-beam v1.24.0
consolidation) and post-rsr-template-repo#81 (template fake-SHA fix).

denoland/setup-deno
  e95548e56dfa95d4e1a28d6f422fafe75c4c26fb (v2.0.3, 2024-10) ->
  667a34cdef165d8d2b2e98dde39547c9daac7282 (v2.0.4)

  Used in:
    governance-reusable.yml:172
    deno-ci-reusable.yml:59     (load-bearing — wrapped by N estate
                                 callers, propagates fleet-wide)

haskell-actions/setup
  f9150cb1d140e9a9271700670baa38991e6fa25c (v2.10.3, comment says "v2") ->
  cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 (v2.11.0)

  Used in:
    casket-pages.yml:32         (matches what panll#61, reposystem#84,
                                 rsr-template-repo#81 now use)

Both new SHAs verified via `gh api repos/<org>/<action>/commits/<sha>` and
match the version pins now in use across the estate. No behavioral
change expected — these are routine pin bumps within the same major.

Companion to:
  rsr-template-repo#81 (template fake-SHA fix, merged)
  standards#289 (setup-beam consolidation, merged)
  Per-repo fan-out: snifs#30 + 5 active-fix PRs + 16-repo template-stub
  sweep in flight.

Author: hyperpolymath

.github/workflows/casket-pages.yml

@@ -29,7 +29,7 @@ jobs:
           path: .casket-ssg
 
       - name: Setup GHCup
-        uses: haskell-actions/setup@f9150cb1d140e9a9271700670baa38991e6fa25c # v2
+        uses: haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 # v2.11.0
         with:
           ghc-version: '9.8.2'
           cabal-version: '3.10'

.github/workflows/deno-ci-reusable.yml

@@ -56,7 +56,7 @@ jobs:
           repository: ${{ github.repository }}
           ref: ${{ github.ref }}
 
-      - uses: denoland/setup-deno@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb # v2.0.3
+      - uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4
         with:
           deno-version: ${{ inputs.deno-version }}
 

.github/workflows/governance-reusable.yml

@@ -169,7 +169,7 @@ jobs:
       # version and the script version — acceptable since scripts here
       # are read-only governance checks.
       - name: Set up Deno
-        uses: denoland/setup-deno@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb # v2.0.3
+        uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4
         with:
           deno-version: v2.x