ci: refresh standards reusable pins to current HEAD (d7c2271) (#2)

Refresh hyperpolymath/standards reusable pins to current main HEAD
`d7c22711e830e1f383846472f6e9b99debdb201e` (carries the actions/cache
repair, GITHUB_TOKEN wiring, --exit-zero, and the SD022 scanner compile
fix). Mechanical pin refresh; propagation of hyperpolymath/hypatia#464.

---
_Generated by [Claude Code](https://claude.ai/code)_

Author: hyperpolymath

.github/workflows/governance.yml

@@ -16,5 +16,5 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@09e7023d24682621bea4e11965a1ef5e87d86c3b
-    timeout-minutes: 10
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e
+    timeout-minutes: 10

.github/workflows/hypatia-scan.yml

@@ -25,5 +25,5 @@ permissions:
 
 jobs:
   scan:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@09e7023d24682621bea4e11965a1ef5e87d86c3b
-    timeout-minutes: 20
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e
+    timeout-minutes: 20

.github/workflows/scorecard.yml

@@ -16,12 +16,12 @@ permissions:
 
 jobs:
   scorecard:
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@09e7023d24682621bea4e11965a1ef5e87d86c3b
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e
     # Reusable called-workflow permissions are CAPPED by the caller's grants;
     # without security-events: write here the scorecard SARIF upload fails with
     # startup_failure (hypatia WF018). id-token: write enables OIDC publish.
     permissions:
       contents: read
       security-events: write
       id-token: write
-    timeout-minutes: 15
+    timeout-minutes: 15