ci(language-policy): drop SaltStack Python carveout (closes reposystem#32)

[hyperpolymath]

Summary

• Removes the SaltStack Python exception from governance-reusable.yml (RSR antipattern check + summary banner) and 4× language-policy.yml (rhodium-standard-repositories root, consent-aware-http, +2 satellites).
• Estate-wide rule: Python is fully banned, no exceptions (removed 2026-01-03; canonical .claude/CLAUDE.md already reflects this).
• Infrastructure now uses Terraform + Ansible — neither needs first-party Python, so no replacement exemption.

Test plan

• Existing repos with no `.py` files: language policy still passes (no behavioural change).
• A hypothetical new `*.py` file (regardless of `salt`/`_states`/`_modules`/`pillar` in path) is now blocked.
• Estate-wide reusable callers (governance-reusable consumers) pick up the corrected enforce-message.

Closes

• Drop obsolete SaltStack Python carve-out from policy + antipattern CI reposystem#32

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 191 issues detected

Severity	Count
🔴 Critical	64
🟠 High	37
🟡 Medium	90

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in affinescript-verify.yml",
    "type": "missing_timeout_minutes",
    "file": "affinescript-verify.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in changelog-reusable.yml",
    "type": "missing_timeout_minutes",
    "file": "changelog-reusable.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql-reusable.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql-reusable.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in deno-ci-reusable.yml",
    "type": "missing_timeout_minutes",
    "file": "deno-ci-reusable.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in doc-format.yml",
    "type": "missing_timeout_minutes",
    "file": "doc-format.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence