chore: update shared build workflow ref

[Nelson Spence (Fieldnote-Echo)]

Updates shared workflow refs to include latest id-token fix.

🤖 Generated with Claude Code

[github-actions]

✅ Grippy Review — PASS

Score: 95/100 | Findings: 1

Delta: 1 new

Off-diff findings (1)

🟡 MEDIUM: Potential Secret Detected in Workflow Configuration

📁 .github/workflows/scorecard.yml:24

A 'Secret Keyword' was flagged by the baseline scanner in .github/workflows/scorecard.yml at line 24. Although the secret is not verified, presence of such secrets in CI/CD pipeline configuration files can pose a risk by exposing sensitive credentials or tokens if not properly encrypted and managed.

Suggestion: Verify whether the detected string at line 24 is an actual secret or sensitive value. If it is, remove it from source control and refactor to use GitHub Secrets or environment variables securely managed outside the repository. If it is a false positive, consider updating the baseline appropriately.

---

_{Commit: 4402c9b}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[project-navi-bot]

All required CI checks passed. Auto-approved by navi-bot.