ci: SHA-pin actions/add-to-project (repo enforces sha_pinning)

add-to-roadmap.yml referenced actions/add-to-project@v1.0.2 (a tag).
This repo sets sha_pinning_required=true on Actions, so the tag ref
caused a startup_failure: the workflow never ran and new issues/PRs
were not added to roadmap project #35. Pin to the v1.0.2 commit SHA
(sibling workflows are all SHA-pinned, which is why they succeed).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/add-to-roadmap.yml

@@ -13,7 +13,7 @@ jobs:
   add-to-project:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/add-to-project@v1.0.2
+      - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
         with:
           project-url: https://github.com/users/hyperpolymath/projects/35
           github-token: ${{ secrets.ADD_TO_PROJECT_PAT }}