fix(ci): bump hypatia-scan-reusable SHA pin to reachable commit (unblocks required check)

[hyperpolymath]

Root cause: the pinned SHA `97df762107501909f50bb770e9bc200b6c415600` references the original PR-branch commit of standards#193, not the squash-merged commit on main (`915139d7`). The PR-branch commit is orphaned — not reachable from `origin/main`:

```
$ git merge-base --is-ancestor 97df762... origin/main
$ echo $?
1
```

GitHub Actions requires `workflow_call` SHAs reachable from the called repo's default branch. With an unreachable SHA, the workflow fails with "This run likely failed because of a workflow file issue" — no jobs are created, no logs produced, and the required check `Hypatia Neurosymbolic Analysis` never reports, blocking every PR via branch-protection's required-checks list.

Evidence

• Last successful hypatia-scan run on this repo: 2026-05-26 17:42 (commit `ce329927`, before SHA-pin merged in chore(ci): convert hypatia-scan.yml to wrapper of standards reusable #84)
• First failing run: 2026-05-27 12:02:35 (commit `eb02a080`, on main after chore(ci): convert hypatia-scan.yml to wrapper of standards reusable #84)
• Every subsequent run: failed identically
• All other reusables (secret-scanner, mirror, governance) pin to reachable SHAs and work fine

Fix

Bump to `4f07382468f045cdaf75e0bbdb1886a0579d83e3` — the latest commit on standards' main that modified `hypatia-scan-reusable.yml` (2026-05-30 erlef/setup-beam consolidation, standards#289). Verified reachable from `origin/main` of standards.

Estate-wide scope

54 repos carry the same broken SHA. Sweep tracked separately. Distribution:

SHA	Repo count	Reachable?
`97df762` (broken — PR-branch commit)	54	❌
`915139d7` (merge commit)	19	✅
`5eb28d7d` (later)	10	✅
`2569c10e` (later)	1	✅

Refs hyperpolymath/standards#287

[github-actions]

🔍 Hypatia Security Scan

Findings: 883 issues detected

Severity	Count
🔴 Critical	232
🟠 High	412
🟡 Medium	239

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in boj-build.yml",
    "type": "unknown",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "unknown",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "unknown",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "unknown",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence