chore(ci): replace 8 governance workflows with single standards caller (#59) (#107)

Per #59: prune CI noise. Deletes 8 per-repo governance workflow
copies and replaces them with one wrapper (governance.yml) that
calls hyperpolymath/standards/.github/workflows/governance-reusable.yml.

Deleted (now covered by the shared bundle):
  quality, guix-nix-policy, npm-bun-blocker, ts-blocker,
  security-policy, rsr-antipattern, wellknown-enforcement,
  workflow-linter

Kept standalone (load-bearing / repo-specific / side-effecting):
  rust-ci, codeql, dependabot-automerge, release,
  dogfood-gate, static-analysis-gate, secret-scanner, hypatia-scan,
  scorecard, scorecard-enforcer, mirror, instant-sync, boj-build,
  casket-pages, rhodibot

Net: 23 -> 15 workflows; per-PR governance check surface drops
from ~8 separate workflows to 1 wrapper. Depends on
hyperpolymath/standards#81 (merge first).

Co-authored-by: hyperpolymath <hyperpolymath@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/governance.yml

@@ -0,0 +1,28 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# governance.yml — single wrapper that calls the shared estate governance
+# bundle in hyperpolymath/standards instead of carrying ~8 local copies.
+#
+# Replaces (deleted in verisimiser#59):
+#   quality.yml, guix-nix-policy.yml, npm-bun-blocker.yml, ts-blocker.yml,
+#   security-policy.yml, rsr-antipattern.yml, wellknown-enforcement.yml,
+#   workflow-linter.yml
+#
+# Load-bearing workflows stay standalone in this repo:
+#   rust-ci, codeql, dependabot-automerge, release
+# (plus repo-specific gates dogfood-gate / static-analysis-gate and the
+#  mirror/pages/scan plumbing, which have side effects or no PR noise).
+
+name: Governance
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  governance:
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main