fix(ci): bump secret-scanner SHA pin to pick up comment-line exemptio… #173

Job	Run time
governance / Well-Known (RFC 9116 + RSR)	5s
governance / Code quality + docs	17s
governance / Workflow security linter	5s
governance / Trusted-base reduction policy	6s
governance / Guix primary / Nix fallback policy	5s
governance / Validate Hypatia baseline	8s
governance / Security policy checks	7s
governance / Language / package anti-pattern policy	14s
governance / Licence consistency	6s
	1m 13s

Provide feedback