fix(governance): scan a clean caller tree (don't scan the .standards-… #553

Job	Run time
governance / Language / package anti-pattern policy	14s
governance / Code quality + docs	14s
governance / Check Workflow Staleness	11s
governance / Trusted-base reduction policy	7s
governance / Guix primary / Nix fallback policy	6s
governance / Licence consistency	7s
governance / Security policy checks	6s
governance / Well-Known (RFC 9116 + RSR)	5s
governance / Workflow security linter	7s
governance / Validate Hypatia Baseline	0s
	1m 17s

Provide feedback