chore: @supabase/ssr version management (#44705)

* Add `@supabase/ssr` to catalog
* Use `catalog:` version of `@supabase/ssr` across repo
* Add workflow to update `@supabase/ssr`
* Switch runners for package and docs updates to `ubuntu-latest` (free,
lighter)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Chores**
* Centralized `@supabase/ssr` versioning across the workspace via the
package catalog.
* Updated CI workflow runners to a more consistent execution
environment.
* Added an automated workflow to streamline updating the `@supabase/ssr`
package and refreshing dependency lockfiles.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

.github/workflows/docs-js-libs-update.yml

@@ -19,7 +19,7 @@ permissions:
 
 jobs:
   update-docs:
-    runs-on: blacksmith-4vcpu-ubuntu-2404
+    runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0

.github/workflows/update-js-libs.yml

@@ -19,7 +19,7 @@ permissions:
 
 jobs:
   update-js-libs:
-    runs-on: blacksmith-4vcpu-ubuntu-2404
+    runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0

.github/workflows/update-ssr.yml

@@ -0,0 +1,76 @@
+name: Update @supabase/ssr
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version to update to'
+        required: true
+        type: string
+      source:
+        description: 'Source of the update'
+        required: false
+        type: string
+        default: 'manual'
+
+permissions:
+  pull-requests: write
+  contents: write
+
+jobs:
+  update-ssr:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        with:
+          ref: master
+
+      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+        name: Install pnpm
+        with:
+          run_install: false
+
+      - name: Use Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version-file: '.nvmrc'
+          cache: 'pnpm'
+
+      - name: Update @supabase/ssr in pnpm-workspace.yaml
+        env:
+          VERSION: ${{ github.event.inputs.version }}
+        run: |
+          sed -i "s|'@supabase/ssr': .*|'@supabase/ssr': ${VERSION}|" pnpm-workspace.yaml
+
+          echo "Updated pnpm-workspace.yaml:"
+          cat pnpm-workspace.yaml
+
+      - name: Install dependencies
+        run: pnpm install --no-frozen-lockfile
+
+      - name: Generate token
+        id: app-token
+        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
+        with:
+          app-id: ${{ secrets.GH_AUTOFIX_APP_ID }}
+          private-key: ${{ secrets.GH_AUTOFIX_PRIVATE_KEY }}
+
+      - name: Create pull request
+        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6.1.0
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+          commit-message: 'feat: update @supabase/ssr to v${{ github.event.inputs.version }}'
+          title: 'feat: update @supabase/ssr to v${{ github.event.inputs.version }}'
+          body: |
+            This PR updates @supabase/ssr to version ${{ github.event.inputs.version }}.
+
+            **Source**: ${{ github.event.inputs.source }}
+
+            **Changes**:
+            - Updated @supabase/ssr to ${{ github.event.inputs.version }}
+            - Refreshed pnpm-lock.yaml
+
+            This PR was created automatically.
+          branch: 'gha/auto-update-ssr-v${{ github.event.inputs.version }}'
+          base: 'master'