fix(ci): bump governance-reusable pin past the hypatia baseline-gate fix (#313)

Echidna's governance pin (`d7c2271`, 2026-06-01) predates the standards
baseline-gate repair (standards#455/#464/#466, merged 2026-07-03) — the
same stale-pin class as the nine repos bumped on 07-04; echidna was
missed. The old reusable runs the hypatia scan unconditionally and exits
1 on any findings ≥ medium (currently 152: 70 high / 82 medium), which
is the last red Governance sub-job (licence went green with #312).

On the current reusable (`6208833`), `Validate Hypatia Baseline` only
runs when the caller ships `.hypatia-baseline.json`; echidna has none,
so the job skips → Governance fully green. Caller contract unchanged
(single optional `runs-on` input); actionlint clean.

**Follow-up (filed separately):** generate `.hypatia-baseline.json` to
re-arm the gate with the 152 existing findings grandfathered, then burn
them down.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/governance.yml

@@ -31,4 +31,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e # main 2026-06-01 (R5 generic — standards#330; consumes .github/canonical-references/)
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@6208833f327ea18f58f558762dbed9bc0effc049 # main 2026-07-07 (baseline-gated hypatia — standards#455/#464/#466)