chore(ci): bump standards reusable pins past #219 governance fix

governance.yml@3ec2e85 (2026-05-25) predates standards#219 (ad366b6,
2026-05-27) which fixes the workflow_sha resolution bug in
governance-reusable.yml's inner self-checkout.

hypatia-scan.yml@97df762 is an orphan PR-branch SHA from before #193
squash-merged as 915139d; file content identical (no commits to
hypatia-scan-reusable.yml since), but cross-checks (cf. standards#220)
prefer reachability via standards/main.

Both bumped to standards/main HEAD 5eb28d7.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/governance.yml

@@ -31,4 +31,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@3ec2e85cc1d54ec2ab20a84fcba96e5008545925 # main 2026-05-25
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@5eb28d7d8790d5389b7b6a5233fe6265a775e3d0 # main 2026-05-27 (post-#219 workflow_sha fix)

.github/workflows/hypatia-scan.yml

@@ -25,5 +25,5 @@ permissions:
 
 jobs:
   hypatia:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@97df762107501909f50bb770e9bc200b6c415600
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@5eb28d7d8790d5389b7b6a5233fe6265a775e3d0
     secrets: inherit