fix(ci): pass the action-pins path to the self-heal own-repo reconcile

[joshua-temple]

Problem

The self-heal companion (.github/workflows/pin-reconcile.yaml) invokes
cascade reconcile --own-repo without --action-pins. That flag has no
default (internal/pinreconcile/command.go), so own-repo mode fails with
reading action pins : open : no such file or directory and never adopts
the pin change.

Fix

Pass the canonical manifest path explicitly:
cascade reconcile --own-repo --action-pins internal/generate/action_pins.yaml.
--own-repo is cascade-only, so this is a workflow-only change; the companion
already runs the released binary that has the flag, so no new release is
needed.

Verification

Built the CLI from this branch and reproduced the trip locally: cloned a
fresh copy of main, bumped actions/create-github-app-token's sha in
.github/workflows/action-pins.yml (leaving the manifest untouched), then
ran the exact companion invocation from that copy.

• Exit code: 0
• internal/generate/action_pins.yaml picked up the new sha/version for
  actions/create-github-app-token
• cascade verify reports 3 files, no drift afterward
• Confirmed no other flag is missing: --root defaults to . and
  --config/--manifest-key default safely for own-repo mode; only
  --action-pins had no fallback.

actionlint on the modified workflow: no findings. go build ./...: clean.