Loaded a configuration file for version '4.36.2', but running\nversion '4.36.3'\n ```\nRoot cause: dependabot #670/#673 bumped `analyze`/`upload-sarif` to\nv4.36.3 (`54f647b7`) but left **`init`** at v4.36.2 (`8aad20d1`) — a\npartial bump (dependabot treats init/analyze as separate actions). init\nwrites a config the newer analyze rejects. The stale `# v3.28.1`\ncomments hid the split.\n\n2. **`hypatia / Hypatia Neurosymbolic Analysis`** — `Cache not found for\ninput keys: hypatia-scanner-v2-… → exit 1`.\nRoot cause: the wrapper pinned the standards reusable at `d135b05` — the\nknown estate CI-red master-cause pin. Fixed upstream in standards\n**#428** (GITHUB_TOKEN), **#441** (un-stale scanner cache — our exact\nsymptom), #445, #453.\n\n## Fix (2 files, 3 lines)\n- `codeql.yml`: `init` → `54f647b7 # v4.36.3` (same SHA as analyze);\ncomments corrected to the SHAs' real version.\n- `hypatia-scan.yml`: reusable pin `d135b05` → `5fa7a834e` (#453, latest\ncommit touching the reusable).\n\nYAML validated. This PR's own check run is the live test — `analyze\n(actions, none)` and `hypatia` should both go green here.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",