fix(ci): add continue-on-error to Hypatia scan step

Scanner exits 1 on infra errors (Dependabot API unreachable, etc.)
unrelated to actual security findings. Critical findings are caught
by the separate Check step. Make the scan step non-blocking.

Author: hyperpolymath

.github/workflows/hypatia-scan.yml

@@ -55,6 +55,7 @@ jobs:
 
       - name: Run Hypatia scan
         id: scan
+        continue-on-error: true  # scanner exits 1 on infra errors; critical findings block via the separate Check step
         env:
           # Hypatia uses Dependabot alerts as one of its signal sources.
           # Without GITHUB_TOKEN it warns and exits 1. The default GITHUB_TOKEN