chore(deps): update ferrlabs/.github digest to 5ff5438

[ferrlabs-renovate]

This PR contains the following updates:

Package	Type	Update	Change
FerrLabs/.github (changelog)	workflow	digest	c2ba2d8 → 5ff5438

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[ferrfleet]

Digest bump for FerrLabs/.github (c2ba2d8 → 5ff5438), two upstream commits in range:

1. pnpm v11→v12 bump — only touches workflow-templates/ci-astro.yml and ci-node.yml (templates, not called from here).
2. sccache endpoint fix — only touches reusable-ci-rust.yml and its setup-sccache action.

FerrFlow only calls reusable-pr-title.yml, reusable-renovate-dispatch.yml, reusable-security-scan.yml, and reusable-sonarqube-scan.yml (confirmed reusable-ci-rust.yml isn't referenced anywhere in this repo), none of which changed in this range. No functional impact here.

CI is green on everything that's finished; a few jobs (Coverage, Build Release Binary, opengrep SAST) were still running at review time but nothing failed.

Nit: the three zizmor "secrets unconditionally inherited" comments on renovate-rebase.yml, security-scan.yml, sonarqube.yml are pre-existing secrets: inherit patterns untouched by this diff, not something this bump introduces.

[github-actions]

SonarQube — aucune nouvelle issue

_{Comparaison entre le projet bac à sable de cette PR et la branche par défaut : SonarQube Community n'analyse pas les PR, ce delta est calculé côté CI. Détail}