chore(deps): update ferrlabs/.github digest to e89ec12

[ferrlabs-renovate]

This PR contains the following updates:

Package	Type	Update	Change
FerrLabs/.github (changelog)	workflow	digest	340c925 → e89ec12

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

SonarQube — aucune nouvelle issue

_{Comparaison entre le projet bac à sable de cette PR et la branche par défaut : SonarQube Community n'analyse pas les PR, ce delta est calculé côté CI. Détail}

[ferrfleet]

Digest-only bump of FerrLabs/.github (340c925→a5886d7), pinned in 4 workflow files. The range is a single upstream commit (#303) touching only reusable-security-scan.yml: it switches the opengrep ruleset fetch from git clone to HTTPS. reusable-ci-node.yml, reusable-ferrflow-release.yml, reusable-pr-title.yml, and reusable-renovate-dispatch.yml — the ones this repo actually consumes for CI/release/PR-title/rebase — are unchanged in this range, so no breaking change reaches this repo.

CI: Test / Quality (knip, madge, audit) is failing here. That job runs via reusable-ci-node.yml, which is untouched by this bump, and the same job passed on the prior merge to main (#314, ~12h earlier). Not a regression from this PR — looks like a pre-existing/flaky audit result (e.g. a newly-published advisory) rather than something this digest bump caused.

Uneventful bump, safe to merge once the unrelated Quality check is sorted out separately.

[ferrfleet]

Follow-up: target digest moved further (a5886d7→e89ec12) since my last review. The 5 additional upstream commits in that range (#305, #307 docker Trivy/cache fixes; #309, #310, #312 rust cargo-deny/advisory-cache changes) only touch reusable-docker-build.yml, reusable-ci-rust.yml, and snippets/deny.toml — none of the 4 reusable workflows this repo actually consumes (reusable-ci-node.yml, reusable-ferrflow-release.yml, reusable-pr-title.yml, reusable-renovate-dispatch.yml). Still uneventful for this repo.

CI: all checks green now, including Test / Quality (knip, madge, audit) which I'd flagged as failing/flaky last time — confirmed pre-existing and now resolved on its own, not caused by this bump. Safe to merge.