ci: refresh standards reusable pins to current HEAD (d7c2271)

[hyperpolymath]

Refresh hyperpolymath/standards reusable pins to current main HEAD d7c22711e830e1f383846472f6e9b99debdb201e (carries the actions/cache repair, GITHUB_TOKEN wiring, --exit-zero, and the SD022 scanner compile fix). Mechanical pin refresh; propagation of hyperpolymath/hypatia#464.

---

Generated by Claude Code

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/hyperpolymath/standards/.github/workflows/scorecard-reusable.yml	d7c22711e830e1f383846472f6e9b99debdb201e	🟢 7.3	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10 Code-Review ⚠️ 0 Found 0/27 approved changesets -- score normalized to 0 Dependency-Update-Tool 🟢 10 update tool detected Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 8 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 7 binaries present in source code Signed-Releases ⚠️ -1 no releases found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 License 🟢 10 license file detected SAST 🟢 9 SAST tool detected but not run on all commits Fuzzing 🟢 10 project is fuzzed Branch-Protection 🟢 4 branch protection is not maximal on development and all release branches Vulnerabilities 🟢 4 6 existing vulnerabilities detected Contributors 🟢 6 project has 2 contributing companies or organizations -- score normalized to 6 CI-Tests 🟢 10 27 out of 27 merged PRs checked by a CI test -- score normalized to 10

Scanned Files

• .github/workflows/scorecard.yml