Repository navigation

fix(ci): update reusable workflow pins to @892497fe + remove excessive job permissions #75

Job	Run time
governance / Trusted-base reduction policy	8s
governance / Code quality + docs	6s
governance / Licence consistency	6s
governance / Check Workflow Staleness	9s
governance / Workflow security linter	6s
governance / Well-Known (RFC 9116 + RSR)	7s
governance / Security policy checks	7s
governance / Guix primary / Nix fallback policy	6s
governance / Language / package anti-pattern policy	33s
governance / Validate Hypatia Baseline	-1s
	1m 27s