chore(deps): update ferrlabs/.github digest to 2718959

[ferrlabs-renovate]

This PR contains the following updates:

Package	Type	Update	Change
FerrLabs/.github (changelog)	workflow	digest	af8854d → 2718959

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[ferrfleet]

Digest bump for FerrLabs/.github (af8854d → 2718959), three commits upstream between those SHAs:

• #357 touches Renovate config only, not a workflow file used here.
• #358 (sign the image even when the CVE scan fails) touches reusable-docker-build.yml, which this repo doesn't call.
• #356 (pass the crates.io token to FerrFlow in reusable-ferrflow-release) is the only change that touches a workflow this repo uses (release.yml → reusable-ferrflow-release.yml). It's additive: adds CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_FERRLABS_REGISTRY_TOKEN }} to the release job's env. No new required input/secret on the workflow_call interface, and release.yml already uses secrets: inherit, so nothing to change here.

pr-title.yml and security-scan.yml point at reusable workflows whose file contents are unchanged between the two SHAs, just the digest a commit closer to main.

CI on this PR was still mid-run at review time (title check and several scan jobs green, rest in progress), nothing failed. No blocking findings.