ci(governance): pin governance-reusable to standards@main SHA (#32)

Pins governance.yml's reusable-workflow ref from the moving @main to the commit it currently resolves to, 78b29005efe954822c86c553b40523b9fdae78d4 (read from the passing run's referenced_workflows metadata). Clears the OpenSSF Pinned-Dependencies / DependencyPinning finding.

This is the CURRENT, fixed standards bundle (identical to what has been passing as @main) -- not the broken e0caf115 commit #31 had to revert (that older version checked out standards at the caller's SHA). Trade-off: governance no longer auto-tracks standards@main; bump this SHA when the standards bundle updates.


Claude-Session: https://claude.ai/code/session_01Y2MWTAqX2x7goVJzjFB4j5

Co-authored-by: Claude <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/governance.yml

@@ -31,4 +31,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@78b29005efe954822c86c553b40523b9fdae78d4 # standards@main, pinned 2026-06-20