Declare action cache keys with --input instead of computing digests manually

once cache action get and once cache action put accept repeatable --input specs that cover files, directories, literal values, environment variables, and stdin. Directories are walked deterministically, so the same inputs always produce the same action key regardless of filesystem order. once cache action get --if-success exits 0 only when the cache has a hit and the recorded exit code is 0.