experiment: clone governance.yml verbatim as rust-ci-experiment-3.yml to isolate filename-pattern bug

Author: hyperpolymath

.github/workflows/rust-ci-experiment-3.yml

@@ -0,0 +1,34 @@
+# SPDX-License-Identifier: MPL-2.0
+# governance.yml — single wrapper calling the shared estate governance bundle
+# in hyperpolymath/standards instead of carrying per-repo copies.
+#
+# Replaces the per-repo governance scaffolding removed in the same commit:
+#   quality.yml, guix-nix-policy.yml, npm-bun-blocker.yml, ts-blocker.yml,
+#   security-policy.yml, rsr-antipattern.yml, wellknown-enforcement.yml,
+#   workflow-linter.yml
+#
+# Load-bearing build/security workflows stay standalone in the repo
+# (rust-ci, codeql, dependabot, release, scan/mirror/pages plumbing).
+
+name: Governance
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+  workflow_dispatch:
+
+# Estate guardrail: cancel superseded runs so re-pushes / rebased PR
+# updates do not pile up queued runs against the shared account-wide
+# Actions concurrency pool. Applied only to read-only check workflows
+# (no publish/mutation), so cancelling a superseded run is always safe.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  governance:
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main