fix(ci): hypatia-scan — drop timeout-minutes from reusable-call job (invalid workflow file) (#297)

## Summary

`.github/workflows/hypatia-scan.yml` was an **invalid workflow file**:
the `hypatia` job calls a reusable workflow (`uses:`), and GitHub does
not allow `timeout-minutes` on a workflow-call job — the whole file is
rejected and the workflow never runs.

## Change

- Remove `timeout-minutes: 10` from the `hypatia` reusable-call job.
Everything else (triggers, concurrency, permissions, SHA pin, `secrets:
inherit`) is untouched.

Allowed keys on a workflow-call job are `name`, `uses`, `with`,
`secrets`, `needs`, `if`, `permissions`, `concurrency`, `strategy` — the
file now conforms. Validated locally with `actionlint` (clean).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/hypatia-scan.yml

@@ -26,5 +26,4 @@ permissions:
 jobs:
   hypatia:
     uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e
-    timeout-minutes: 10
     secrets: inherit