chore(ci): bump standards reusable workflow pins

[hyperpolymath]

Bumps stale hyperpolymath/standards/.github/workflows/*-reusable.yml pins to current standards HEAD (d135b05bfc647d0c0fbfedc7e80f37ea50f49236) to clear governance 'Check Workflow Staleness' (ADR-003) failures. CI-pin changes only.

OWNER-AUTHORIZED estate pin-bump campaign 2026-06-24.

🤖 Generated with Claude Code

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml	d135b05bfc647d0c0fbfedc7e80f37ea50f49236	🟢 7.3	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10 Code-Review ⚠️ 0 Found 0/27 approved changesets -- score normalized to 0 Dependency-Update-Tool 🟢 10 update tool detected Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 8 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 7 binaries present in source code Signed-Releases ⚠️ -1 no releases found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 License 🟢 10 license file detected SAST 🟢 9 SAST tool detected but not run on all commits Fuzzing 🟢 10 project is fuzzed Branch-Protection 🟢 4 branch protection is not maximal on development and all release branches Vulnerabilities 🟢 4 6 existing vulnerabilities detected Contributors 🟢 6 project has 2 contributing companies or organizations -- score normalized to 6 CI-Tests 🟢 10 27 out of 27 merged PRs checked by a CI test -- score normalized to 10

Scanned Files

• .github/workflows/secret-scanner.yml