fix(ci): bump governance/readme-derive pins, fix abi-drift and release.yml parse

.github/workflows/abi-drift.yml

@@ -81,8 +81,6 @@ jobs:
 
       - name: Install Rust toolchain (stable)
         uses: dtolnay/rust-toolchain@v1
-        with:
-          toolchain: v1
         with:
           toolchain: stable
 

.github/workflows/governance.yml

@@ -35,4 +35,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@5a0891e9e58b785181a92e141505ca96ca987b42

.github/workflows/readme-derive.yml

@@ -29,7 +29,7 @@ permissions:
 
 jobs:
   readme-derive:
-    # Pinned to the standards commit that introduced readme-derive-reusable.yml.
-    # Repin to include hyperpolymath/standards#476 (anchor-ID convention guard)
-    # once it lands on main; this repo's README.adoc already satisfies it.
-    uses: hyperpolymath/standards/.github/workflows/readme-derive-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a
+    # Pinned to a hyperpolymath/standards main commit that carries the gem
+    # install fix (asciidoctor:VER syntax) and the anchor-ID convention guard
+    # (standards#476); this repo's README.adoc satisfies both.
+    uses: hyperpolymath/standards/.github/workflows/readme-derive-reusable.yml@5a0891e9e58b785181a92e141505ca96ca987b42

.github/workflows/release.yml

@@ -160,7 +160,6 @@ jobs:
   provenance:
     name: SLSA Provenance
     needs: [build]
-    runs-on: ubuntu-latest
     permissions:
       actions: read
       id-token: write