chore(ci): add GPG commit signing to bot workflows

Author: jdalton

.github/workflows/generate.yml

@@ -65,11 +65,10 @@ jobs:
             echo "has_changes=false" >> $GITHUB_OUTPUT
           fi
 
-      - name: Configure git
+      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@6096b06b1790f411714c89c40f72aade2eeaab7c # main
         if: steps.check.outputs.has_changes == 'true'
-        run: |
-          git config --global user.name "github-actions[bot]"
-          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+        with:
+          gpg-private-key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
 
       - name: Commit and push changes
         if: steps.check.outputs.has_changes == 'true'
@@ -113,6 +112,9 @@ jobs:
             echo "PR #$existing_pr already exists, skipping creation"
           fi
 
+      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@6096b06b1790f411714c89c40f72aade2eeaab7c # main
+        if: always()
+
   validate:
     name: Validate generated SDK
     needs: fetch_and_update

.github/workflows/weekly-update.yml

@@ -57,12 +57,14 @@ jobs:
           GH_TOKEN: ${{ github.token }}
         run: |
           BRANCH_NAME="weekly-update-$(date +%Y%m%d)"
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
           git remote set-url origin "https://x-access-token:${GH_TOKEN}@github.com/${{ github.repository }}.git"
           git checkout -b "$BRANCH_NAME"
           echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
 
+      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@6096b06b1790f411714c89c40f72aade2eeaab7c # main
+        with:
+          gpg-private-key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
+
       - name: Run updating skill with Claude Code
         id: claude
         timeout-minutes: 30
@@ -153,6 +155,9 @@ jobs:
           path: claude-output.log
           retention-days: 7
 
+      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@6096b06b1790f411714c89c40f72aade2eeaab7c # main
+        if: always()
+
   notify:
     name: Notify results
     needs: [check-updates, apply-updates]