ci: refresh standards reusable pins 5a93d9d -> 09e7023d (current HEAD) (#41)

The governance 'Check Workflow Staleness' gate rejects 5a93d9d as out of the
recency window (>50 commits / >14 days behind standards HEAD 09e7023d), and the
5a93d9d hypatia-scan reusable referenced an unresolvable actions/cache pin.
Refresh the three out-of-window pins to current standards HEAD:
governance.yml, hypatia-scan.yml, scorecard.yml.

(rust-ci / secret-scanner / mirror pin other SHAs and are unaffected.)


Claude-Session: https://claude.ai/code/session_01Y2MWTAqX2x7goVJzjFB4j5

Co-authored-by: Claude <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/governance.yml

@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@09e7023d24682621bea4e11965a1ef5e87d86c3b

.github/workflows/hypatia-scan.yml

@@ -16,4 +16,4 @@ permissions:
 
 jobs:
   scan:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@09e7023d24682621bea4e11965a1ef5e87d86c3b

.github/workflows/scorecard.yml

@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   scorecard:
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@09e7023d24682621bea4e11965a1ef5e87d86c3b