ci: re-pin Hypatia scan reusable to standards-main GITHUB_TOKEN fix (#322)

## Summary

Bumps the Hypatia scan wrapper's reusable-workflow pin from `d135b05`
(pre-fix)
to `e2ef79eecdd623ff631fcbf3fe0268ba4f4ce166` — the squash-merge of
[standards#429](hyperpolymath/standards#429) on
`standards/main`.

### Why

- `d135b05` predates the alert-token fix: the reusable's "Run Hypatia
scan" step
  set no `GITHUB_TOKEN`, so the scanner's Dependabot / code-scanning /
secret-scanning checks were skipped with `GITHUB_TOKEN not set`
warnings.
- The interim pin `abd93c3` (the head commit of PR #429) is **not** an
ancestor
of `standards/main` — #429 was squash-merged as `e2ef79e` — so it
tripped the
governance **Workflow-Staleness** check (`abd93c3` "not a recognised
ancestor
  of standards HEAD").
- `e2ef79e` is on `standards/main` and carries the full fix:
`GITHUB_TOKEN: ${{ secrets.HYPATIA_SCAN_PAT || secrets.GITHUB_TOKEN }}`
plus
  `--exit-zero` + `if: always()` artifact upload.

This is the fleet-side counterpart to the identical re-pin in
`hyperpolymath/hypatia`.

> Note: fleet **actuation** uses `HYPATIA_DISPATCH_PAT` (a different
token); this
> change only concerns the read-only scan reusable and does not touch
dispatch.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---
_Generated by [Claude
Code](https://claude.ai/code/session_01CqWi7nt49wKrsfsTdXy8ed)_

Co-authored-by: hyperpolymath <paraordinate@yahoo.co.uk>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: 3 people

.github/workflows/hypatia-scan.yml

@@ -27,7 +27,7 @@ permissions:
 
 jobs:
   hypatia:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@e2ef79eecdd623ff631fcbf3fe0268ba4f4ce166
     secrets: inherit
     # Total caller-side wall-clock cap for the reusable. Matches
     # Hypatia's `missing_timeout_minutes` rule expectation. The scan is