fix(ci): bump hypatia-scan-reusable SHA pin to reachable commit (unbl… #78

Job	Run time
governance / Code quality + docs	17s
governance / Security policy checks	8s
governance / Validate Hypatia baseline	7s
governance / Language / package anti-pattern policy	36s
governance / Well-Known (RFC 9116 + RSR)	7s
governance / Guix primary / Nix fallback policy	8s
governance / Licence consistency	10s
governance / Trusted-base reduction policy	13s
governance / Workflow security linter	9s
	1m 55s

Provide feedback