ci: refresh standards reusable pins to current HEAD (d7c2271) (hypatia#464)

Mechanical SHA-pin refresh to standards/main HEAD d7c22711e830e1f383846472f6e9b99debdb201e.

Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

.github/workflows/governance.yml

@@ -31,5 +31,5 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236 # main 2026-06-02
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e # main 2026-06-02
     timeout-minutes: 30

.github/workflows/hypatia-scan.yml

@@ -27,7 +27,7 @@ permissions:
 
 jobs:
   hypatia:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@e2ef79eecdd623ff631fcbf3fe0268ba4f4ce166
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e
     secrets: inherit
     # Total caller-side wall-clock cap for the reusable. Matches
     # Hypatia's `missing_timeout_minutes` rule expectation. The scan is

.github/workflows/scorecard-enforcer.yml

@@ -15,6 +15,6 @@ jobs:
     permissions:
       security-events: write
       id-token: write
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e
     secrets: inherit
     timeout-minutes: 20