chore(workflows): update socket-registry SHA references

Update socket-registry workflow/action references from 1a96ced to e145a6b.

This includes the latest fixes for:
- pnpm version conflict resolution
- Security hardening (zizmor findings)
- Template injection vulnerabilities
- Credential persistence settings

Author: jdalton

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ permissions:
 jobs:
   ci:
     name: Run CI Pipeline
-    uses: SocketDev/socket-registry/.github/workflows/ci.yml@1a96ced97aaa85d61543351b90d6f463b983c46c # main
+    uses: SocketDev/socket-registry/.github/workflows/ci.yml@e145a6b355d614054e4df3d49ba5218812f42b3e # main
     with:
       fail-fast: false
       lint-script: 'pnpm run lint --all'

.github/workflows/claude-auto-review.yml

@@ -15,6 +15,6 @@ permissions:
 
 jobs:
   auto-review:
-    uses: SocketDev/socket-registry/.github/workflows/claude-auto-review.yml@1a96ced97aaa85d61543351b90d6f463b983c46c # main
+    uses: SocketDev/socket-registry/.github/workflows/claude-auto-review.yml@e145a6b355d614054e4df3d49ba5218812f42b3e # main
     secrets:
       anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}

.github/workflows/claude.yml

@@ -22,6 +22,6 @@ permissions:
 
 jobs:
   claude:
-    uses: SocketDev/socket-registry/.github/workflows/claude.yml@1a96ced97aaa85d61543351b90d6f463b983c46c # main
+    uses: SocketDev/socket-registry/.github/workflows/claude.yml@e145a6b355d614054e4df3d49ba5218812f42b3e # main
     secrets:
       anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}

.github/workflows/provenance.yml

@@ -21,7 +21,7 @@ permissions:
 
 jobs:
   publish:
-    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@1a96ced97aaa85d61543351b90d6f463b983c46c # main
+    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@e145a6b355d614054e4df3d49ba5218812f42b3e # main
     with:
       debug: ${{ inputs.debug }}
       package-name: '@socketregistry/packageurl-js'

.github/workflows/socket-auto-pr.yml

@@ -24,7 +24,7 @@ permissions:
 
 jobs:
   socket-auto-pr:
-    uses: SocketDev/socket-registry/.github/workflows/socket-auto-pr.yml@1a96ced97aaa85d61543351b90d6f463b983c46c # main
+    uses: SocketDev/socket-registry/.github/workflows/socket-auto-pr.yml@e145a6b355d614054e4df3d49ba5218812f42b3e # main
     with:
       debug: ${{ inputs.debug }}
       autopilot: true

package.json

@@ -1,6 +1,7 @@
 {
   "name": "@socketregistry/packageurl-js",
   "version": "1.3.5",
+  "packageManager": "pnpm@>=10.21.0",
   "license": "MIT",
   "description": "Socket.dev optimized package override for packageurl-js",
   "keywords": [