fix(ci): restore reachable standards workflow pins (#48)

Replace the unreachable standards reusable-workflow commit
7fdc2705df74b4e352d2a1cde3e87a5923fdf329 with reachable standards main
commit 092dedada188f56c5915f74a5fd40aac093742c3. The old SHA is an
intermediate commit from squash-merged standards PR #596: it exists, but
GitHub rejects it for cross-repository reusable workflows before
creating jobs. This restores Hypatia/SARIF and the other affected
workflows without weakening SHA pinning or branch protection. Estate
incident: 251 active workflow files across 70 repositories in
hyperpolymath and metadatastician.

---------

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/governance.yml

@@ -9,8 +9,9 @@ on:
   workflow_dispatch:
 
 permissions:
+  actions: read
   contents: read
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@092dedada188f56c5915f74a5fd40aac093742c3

.github/workflows/hypatia-scan.yml

@@ -16,4 +16,4 @@ permissions:
 
 jobs:
   scan:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@092dedada188f56c5915f74a5fd40aac093742c3

.github/workflows/scorecard.yml

@@ -13,7 +13,7 @@ permissions:
 
 jobs:
   scorecard:
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@092dedada188f56c5915f74a5fd40aac093742c3
     permissions:
       contents: read
       security-events: write

.github/workflows/secret-scanner.yml

@@ -18,5 +18,5 @@ permissions:
   contents: read
 jobs:
   scan:
-    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
+    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@092dedada188f56c5915f74a5fd40aac093742c3
     secrets: inherit