Scorecard reconciliation fails on casket-pages.yml (main and PRs) #589

Problem

scorecard / Run Scorecard fails on main (head 8a4f983, job 111622087179) and scorecard / Run Scorecard PR fails on PR #586 the same way:

Scorecard reconciliation failed: Native action-lock verification failed for .github/workflows/casket-pages.yml

Locally, gh actions-lock --no-fix .github/workflows/casket-pages.yml (and the full --no-fix run over all 24 workflows) is clean on the #586 head. The failure is therefore in the reusable scorecard reconciliation step (reconcile-scorecard-actions-lock.rb, gh-actions-lock v0.1.6), not in the lockfile as gh actions-lock itself sees it. #586 does not touch casket-pages.yml.

Acceptance criteria

• Root cause identified: either the lockfile entry for an action in casket-pages.yml (e.g. haskell-actions/setup@v2.12.1 or a transitive dependency) or the reconciler's per-workflow verification.
• scorecard / Run Scorecard is green on main.
• If the reconciler is at fault, a fix or issue in hyperpolymath/standards is linked here.

Deferral issue under AGENTS.md §5c item 3, filed from #586.