chore(deps): bump actions/setup-node from 4 to 6

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/check-skills.yml

@@ -32,7 +32,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 20
 
@@ -56,7 +56,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 20
 

.github/workflows/release.yml

@@ -34,7 +34,7 @@ jobs:
       # npm 10.x in PATH → `npm publish` can't detect OIDC → ENEEDAUTH.
       # Node 24 ships npm 11.x; npm then auto-authenticates via OIDC (no token).
       - name: Setup Node + npm for trusted publishing
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9f7362e8dae4041e # v6
+        uses: actions/setup-node@7c2c68d20d402ed6a201ada70a81341941093140 # v6
         with:
           node-version: "24"
           registry-url: "https://registry.npmjs.org"