chore(ci): add GPG commit signing to weekly-update workflow (#134)

* chore(ci): add GPG commit signing to weekly-update workflow

* chore(ci): improve Claude prompt structure in weekly-update

* chore(ci): simplify Claude prompt to just invoke /updating skill

Author: jdalton

.github/workflows/weekly-update.yml

@@ -59,12 +59,14 @@ jobs:
           GH_TOKEN: ${{ github.token }}
         run: |
           BRANCH_NAME="weekly-update-$(date +%Y%m%d)"
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
           git remote set-url origin "https://x-access-token:${GH_TOKEN}@github.com/${{ github.repository }}.git"
           git checkout -b "$BRANCH_NAME"
           echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
 
+      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@6096b06b1790f411714c89c40f72aade2eeaab7c # main
+        with:
+          gpg-private-key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
+
       - name: Run updating skill with Claude Code
         id: claude
         timeout-minutes: 30
@@ -83,7 +85,7 @@ jobs:
           set +e
           claude --print --dangerously-skip-permissions \
             --model sonnet \
-            "/updating - Run the updating skill to update all dependencies. Create atomic commits for each update. You are running in CI mode - skip builds and tests. Do not push or create a PR." \
+            "/updating" \
             2>&1 | tee claude-output.log
           CLAUDE_EXIT=${PIPESTATUS[0]}
           set -e
@@ -157,6 +159,9 @@ jobs:
           path: claude-output.log
           retention-days: 7
 
+      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@6096b06b1790f411714c89c40f72aade2eeaab7c # main
+        if: always()
+
   notify:
     name: Notify results
     needs: [check-updates, apply-updates]