chore(actions): relock drifted action pins (#8)

Regenerates `.github/workflows/actions.lock` only — every workflow file
is byte-identical.

The lockfile had drifted: recorded pins no longer matched the refs the
workflows name. This run used `--relock --no-onboard --no-narrow
--no-migrate-local-actions`, and the commit was gated on an assert that
the
changed-path set is **exactly** the lockfile. Repos where the tool
wanted to
touch a `.yml` were rejected by that assert and are handled separately.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

https://claude.ai/code/session_0178nN4Nm3neFRy5K9StZKnB

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/actions.lock

@@ -3,13 +3,13 @@
 # Docs: https://gh.io/actions-lockfile
 version: 'v0.0.2'
 workflows:
-    '.github/workflows/hypatia-scan.yml': []
     '.github/workflows/ada-ci.yml':
         - 'actions/checkout@v4.4.0'
         - 'actions/download-artifact@v3.0.2'
         - 'actions/upload-artifact@v3.2.1'
     '.github/workflows/dogfood-gate.yml':
         - 'actions/checkout@v4.3.1'
+    '.github/workflows/hypatia-scan.yml': []
     '.github/workflows/label-triage.yml': []
     '.github/workflows/labels.yml': []
     '.github/workflows/openssf-compliance.yml':