chore(ci): bump provenance.yml registry SHA to d54c36d0

Was pinned at 34fef52be9 — the pre-propagation SHA from before the
Oct 2026 cascade. Every other fleet repo's provenance.yml moved to
d54c36d0 months ago (see socket-sdk-js, socket-registry's
_local-not-for-reuse-provenance.yml, stuie's new provenance.yml).
This was the last stale reference in the fleet.

No behavioral change — reusable workflow semantics are unchanged
between the two SHAs; this is a catch-up pin for consistency.

Author: jdalton

.github/workflows/provenance.yml

@@ -26,7 +26,7 @@ permissions:
 
 jobs:
   publish:
-    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@34fef52be917f89dbbeb464860f2aaf0f3812c40 # main
+    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@d54c36d0bed05ffffbe8b14e7663927eaa19d5df # main
     with:
       debug: ${{ inputs.debug }}
       package-name: '@socketsecurity/lib'