chore(deps): update gstj/magic action to v1.19.6

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
GSTJ/magic	workflow	patch	v1.19.5 → v1.19.6

---

Release Notes

GSTJ/magic (GSTJ/magic)

v1.19.6

Compare Source

The release publishes magic-oxlint-config@2.0.6. The repo release is
v1.19.6, and v1 moves onto it.

Reusable workflows use their running commit

Reusable workflows now resolve sibling composite actions through GitHub's $/
syntax. A caller pinned to a Magic tag or SHA gets the workflow and its actions
from the same commit. Validation rejects stale self-references, @ref suffixes,
and path traversal. The syntax is available on GitHub.com; self-hosted runners
need version 2.336.0 or newer.

pnpm/action-setup moves to v5. Turborepo caches now persist the workspace's
.turbo directory with GitHub's pinned first-party cache action, using
platform, repository, job, and commit-scoped keys.

Renovate updates stay visible during quarantine

Renovate now opens dependency and vulnerability-alert PRs immediately. The
14-day release-age check still blocks them until the quarantine clears. The
Dependency Dashboard and PR list now show the same pending work.

Fumadocs and zbsearch now move in one reviewed group. The OXC group is split
into matching oxlint and oxfmt toolchains, with each Magic config moving beside
the binary it targets. These groups keep the 14-day quarantine and never
automerge. Related major and minor upgrades now share one PR.

oxlint 1.78 peer floor

magic-oxlint-config@2.0.5 added one-var: off, but oxlint versions before
1.78 reject that rule name even when it is disabled. Version 2.0.6 raises the
oxlint peer floor to 1.78, matching the first compatible binary.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[GSTJ]

Proof from 8354164: the frozen install, zero-vulnerability audit, lint, format, typecheck, 64 tests, 13 release controls, build, changelog checks, actionlint, and packed-plugin load all passed. The pinned v1.19.6 digest resolves to Magic release commit f30b623, and the exact-head CI ran that reusable workflow successfully.