Merge new-session-th4e9w-readiness into new-session-th4e9w-audit

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019a95kk88TZ1iegsBK3kox3

Author: claude

.github/workflows/scorecard.yml

@@ -17,7 +17,7 @@ jobs:
   scorecard:
     uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@333b06a01db1874ffedb2de1bfabb195640927c7
     permissions:
-      actions: read
+      actions: read # required by scorecard-reusable.yml to read workflow metadata
       contents: read
       security-events: write
       id-token: write