fix(ci): repair never-parsed workflow(s) (#16)

These files were rejected by the workflow parser before any run could be
scheduled: the API reported each name as its file path (the never-parsed
fallback), and every run failed at 0s with zero jobs and no logs.

-
.github/workflows/secret-scanner.yml:ILLEGAL_KEY:rust-secrets:if-hashFiles

Validated per file: actionlint, yaml.safe_load, duplicate-key check.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

## How this was found

GitHub reports a workflow's `name` as its file path when it has never
successfully parsed the file. An estate-wide scan of 425 repos found 263
such workflows across 133 repos.

## Verification

Each edited file passes actionlint, `yaml.safe_load`, and a
duplicate-key
check. For push-triggered workflows, full verification completes after
merge:
the decisive proof is the workflow resolving its declared name instead
of
its path.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/secret-scanner.yml

@@ -29,7 +29,6 @@ jobs:
   rust-secrets:
     runs-on: ubuntu-latest
     timeout-minutes: 15
-    if: hashFiles('**/Cargo.toml') != ''
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Check for hardcoded secrets in Rust