ci(governance): refresh stale hyperpolymath/standards reusable pins

The governance / Hypatia / Scorecard reusables were pinned at 5a93d9d (stale),
which failed two estate-governance checks on every PR off main:
- "governance / Check Workflow Staleness" (pins behind current standards SHA)
- "scan / Hypatia Neurosymbolic Analysis" (the old Hypatia reusable referenced
  actions/cache@d4373f2, a SHA that no longer resolves)

Bump governance-reusable, hypatia-scan-reusable and scorecard-reusable from
5a93d9d -> d72fe5a (the SHA the staleness check compares against; it carries the
cache/baseline-delay fix and keeps Scorecard out of Code Scanning). The legacy
scorecard-enforcer.yml flagged by the same check was already removed on main.
The secret-scanner and mirror reusables are pinned at different SHAs, were not
flagged, and are left unchanged.

Note: hyperpolymath/standards is not in this session's scope, so the target SHA
is taken from the staleness check's own output rather than verified against the
standards repo directly. This PR's own staleness check is the verification.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MWPX7iyvHf5AuwBAn1sJPy

Author: claude

.github/workflows/governance.yml

@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20

.github/workflows/hypatia-scan.yml

@@ -16,4 +16,4 @@ permissions:
 
 jobs:
   scan:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20

.github/workflows/scorecard.yml

@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   scorecard:
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20