ci: bump SocketDev/action from 1.3.0 to 1.3.2

[dependabot]

Summary

Update the Socket action from 1.3.0 to 1.3.2 in package release verification.

Changes

• Pin SocketDev/action to the immutable v1.3.2 commit, ba6de6cc0565af1f42295590380973573297e31f, with an exact version comment.
• Reviewed upstream 1.3.1 and 1.3.2 releases and the complete version comparison. Changes affect upstream release workflows and documentation only.
• Verified identical Git blobs for action metadata, source, distributed main/post bundles, package manifest, and lockfile. The Node 24 action runtime, firewall-free mode, and pinned firewall binary 1.15.0 are unchanged.
• No compatibility workaround or redundant repository code can be removed as a result of this upgrade.

Testing

• git diff --check passed.
• Compared the old/new Git trees and reviewed shipped setup, version selection, PATH setup, and post-action behavior against release workflow inputs.
• Current-head CI: 41 checks passed; three conditional jobs were skipped. All required checks passed.
• No application tests were added or rerun locally for this action-pin edit. The required description update triggers a fresh CI run, which must pass before merge.

Risk and rollout

The shipped action implementation is identical, so no runtime migration is needed. Package release verification will use the new pin on the next authorized release. The release workflow was not dispatched during this review. Reverting the pin restores 1.3.0.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[mldangelo-oai]

Reviewed head 1f0848379e36b8d839302296fea9c8ae26bbad4f. The exact upstream 1.3.0–1.3.2 comparison changes documentation and release workflows; shipped action metadata, source, main/post bundles and dependencies are identical. Existing Node 24 runtime, firewall-free mode and firewall 1.15.0 pin remain compatible. No code simplification is warranted.

The fresh CI run succeeded: 39 jobs passed and three conditional jobs were skipped. All required current-head checks pass, and no unresolved review threads remain. The merge against latest main is clean and preserves the preceding action upgrades. Public disclosure review is complete.