refactor(ci): simplify setup-script to use script name instead of command

Update provenance workflow to use simpler 'ci:validate' script name
instead of 'pnpm run ci:validate' command, taking advantage of the
new smart detection in socket-registry@0f9229db that automatically
prefixes script names with 'pnpm run'.

Changes:
- Update workflow SHA to 0f9229dbc545a2de7b06024756e41fa5e0debc8b
- Simplify setup-script from 'pnpm run ci:validate' to 'ci:validate'

Author: jdalton

.github/workflows/provenance.yml

@@ -26,11 +26,11 @@ permissions:
 
 jobs:
   publish:
-    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@4709a2443e5a036bb0cd94e5d1559f138f05994c # main
+    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@0f9229dbc545a2de7b06024756e41fa5e0debc8b # main
     with:
       debug: ${{ inputs.debug }}
       dist-tag: ${{ inputs.dist-tag }}
       package-name: '@socketregistry/packageurl-js'
       publish-script: 'publish:ci'
-      setup-script: 'pnpm run ci:validate'
+      setup-script: 'ci:validate'
       use-trusted-publishing: true