ci: re-pin scorecard reusable to standards HEAD d7c2271 (hypatia#464)

Author: hyperpolymath

.github/workflows/scorecard.yml

@@ -16,12 +16,12 @@ permissions:
 
 jobs:
   scorecard:
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@09e7023d24682621bea4e11965a1ef5e87d86c3b
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e
     # Reusable called-workflow permissions are CAPPED by the caller's grants;
     # without security-events: write here the scorecard SARIF upload fails with
     # startup_failure (hypatia WF018). id-token: write enables OIDC publish.
     permissions:
       contents: read
       security-events: write
       id-token: write
-    timeout-minutes: 15
+    timeout-minutes: 15