ci(governance): bump standards reusables to d72fe5a; retire interim hypatia pin (#26)

standards#394 (d72fe5a) repinned actions/cache to the working v4.2.0 SHA
(1bd1e32a3bdc45362d1e726936510720a7c30a57) in governance-reusable.yml and
hypatia-scan-reusable.yml, superseding the broken d4373f2 pin from 5a93d9d.

Forward-bump the three core standards pins to the new HEAD:
- governance.yml:   5a93d9d -> d72fe5a (picks up the cache fix)
- hypatia-scan.yml: 915139d (interim) -> d72fe5a (cache fix; retires the #23 stopgap)
- scorecard.yml:    5a93d9d -> d72fe5a (realign to HEAD; reusable unchanged at d72fe5a)

Clears the Check Workflow Staleness gate (hypatia was flagged since the #23
revert) and drops the now-obsolete INTERIM comment. secret-scanner and mirror
keep their own pins — d72fe5a did not modify those reusables.


Claude-Session: https://claude.ai/code/session_01UCnxjXkN6uDj9YSANuGEgR

Co-authored-by: Claude <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/governance.yml

@@ -31,4 +31,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20

.github/workflows/hypatia-scan.yml

@@ -25,9 +25,5 @@ permissions:
 
 jobs:
   hypatia:
-    # INTERIM: pinned to the last working SHA. standards@5a93d9d's hypatia
-    # reusable pins a non-existent actions/cache SHA (d4373f2…), which hard-fails
-    # this check at startup. Restore the @5a93d9d pin once standards repins
-    # actions/cache to v4.2.0 (1bd1e32a3bdc45362d1e726936510720a7c30a57).
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@915139d73560e65a8240b8fc7768698658502c89
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20
     secrets: inherit

.github/workflows/scorecard.yml

@@ -17,5 +17,5 @@ jobs:
       id-token: write
       contents: read
       actions: read
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20
     secrets: inherit