fix(ci): bump governance-reusable pin past the hypatia baseline-gate fix

Echidna's pin (d7c2271, 2026-06-01) predates the standards baseline-gate
repair (standards#455/#464/#466, merged 2026-07-03): the old reusable
runs the hypatia scan unconditionally and fails on any findings >=
medium (currently 152: 70 high, 82 medium), never consuming a baseline.
On the current reusable the Validate-Hypatia-Baseline job is gated on
the caller shipping .hypatia-baseline.json — echidna has none, so the
job skips and Governance goes fully green (licence job already green
since #312).

Caller contract unchanged (only optional runs-on input). Follow-up
tracked separately: generate a baseline JSON to re-arm the gate with
the 152 existing findings grandfathered.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/governance.yml

@@ -31,4 +31,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e # main 2026-06-01 (R5 generic — standards#330; consumes .github/canonical-references/)
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@6208833f327ea18f58f558762dbed9bc0effc049 # main 2026-07-07 (baseline-gated hypatia — standards#455/#464/#466)