ci(governance): bump standards pins d72fe5a -> 4ddc926

The standards estate advanced again since #42, so the governance +
scorecard reusable pins went stale against the new HEAD (the staleness
check compares pins to standards HEAD; this is why "Check Workflow
Staleness" went red on #45, independent of its docs content). Bump both
to 4ddc926. Verified against check-workflow-staleness.sh@4ddc926: same
five rules, all pass (exit 0); the scorecard-reusable token appears only
on the uses: line, so the #42 comment-grep bug stays fixed.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LvsZgNxFbeqfRmrVFNhJ8G

Author: claude

.github/workflows/governance.yml

@@ -31,4 +31,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4ddc926b4b86451c2711a16bf927ed16ad2db45e

.github/workflows/scorecard.yml

@@ -24,5 +24,5 @@ jobs:
       contents: read
       security-events: write
       id-token: write
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4ddc926b4b86451c2711a16bf927ed16ad2db45e
     secrets: inherit