ci(weekly-update): use local fleet actions over dead cross-repo pins

The socket-registry action SHAs were erased by that repo's history consolidation and the actions moved under .github/actions/fleet; the repo carries the same cascaded actions locally.

Author: jdalton

.github/workflows/weekly-update.yml

@@ -29,7 +29,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@bb4bb872b58d7c97f828caea595ff534b78c507b # main (2026-05-15)
+      - uses: ./.github/actions/fleet/setup-and-install
         with:
           checkout: 'false'
 
@@ -62,7 +62,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@bb4bb872b58d7c97f828caea595ff534b78c507b # main (2026-05-15)
+      - uses: ./.github/actions/fleet/setup-and-install
         with:
           checkout: 'false'
 
@@ -79,7 +79,7 @@ jobs:
           git checkout -b "$BRANCH_NAME" HEAD~1
           echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@bb4bb872b58d7c97f828caea595ff534b78c507b # main (2026-05-15)
+      - uses: ./.github/actions/fleet/setup-git-signing
         with:
           gpg-private-key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
 
@@ -332,7 +332,7 @@ jobs:
             test.log
           retention-days: 7
 
-      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@bb4bb872b58d7c97f828caea595ff534b78c507b # main (2026-05-15)
+      - uses: ./.github/actions/fleet/cleanup-git-signing
         if: always()
 
   notify: