chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4

.github/workflows/scorecard.yml

@@ -29,7 +29,7 @@ jobs:
       # ossf/scorecard-action and the actions below are tracked by Dependabot
       # (see .github/dependabot.yml) and may be pinned to a SHA later.
       - name: Run analysis
-        uses: ossf/scorecard-action@v2.4.3
+        uses: ossf/scorecard-action@v2.4.4
         with:
           results_file: results.sarif
           results_format: sarif

.modonome/snapshot/map.md

@@ -2,7 +2,7 @@
 
 Modonome snapshot. Read this before reading the repo. Tier 0 (signature.json) is the fingerprint: if merkle_root matches your last read, nothing changed. Tier 1 (map.json / map.md) lists modules, public API signatures, import edges, and attention ranking. Cite anchors (F: for files, S: for symbols); each resolves to a path and line so you can act without re-reading the whole repo.
 
-Merkle root: sha256:77f438f5f02372a26baf9b3f1e7ebccf8c303be25ed47f16122ccc4c80ee0f41
+Merkle root: sha256:927516ba4719dd9d0daf9e0a646b5aab75203f89518391c7672b9352ef1776ac
 Files: 1029  Bytes: 3805193  Map tokens: 135721/120000
 
 ## Modules

.modonome/snapshot/signature.json

@@ -1 +1 @@
-{"commands":{"build":"","lint":"","test":"npm test"},"entrypoints":["bin/modonome.mjs"],"generated_at":"2026-07-16T02:18:05.384Z","generated_for":"modonome","governance":{"armed":false,"autonomy_enabled":false,"dry_run":true},"instructions":["AGENTS.md","CLAUDE.md","CODEX.md","CONTRIBUTING.md","README.md"],"language_mix":{"(none)":12,"cff":1,"css":50,"diff":18,"html":9,"js":19,"json":139,"jsonl":8,"md":144,"mjs":351,"patch":40,"png":5,"py":4,"sh":1,"svg":2,"tf":4,"toml":2,"ts":61,"tsx":98,"txt":18,"webmanifest":1,"webp":1,"woff2":9,"xml":1,"yaml":9,"yml":22},"merkle_root":"sha256:77f438f5f02372a26baf9b3f1e7ebccf8c303be25ed47f16122ccc4c80ee0f41","preamble":"Modonome snapshot. Read this before reading the repo. Tier 0 (signature.json) is the fingerprint: if merkle_root matches your last read, nothing changed. Tier 1 (map.json / map.md) lists modules, public API signatures, import edges, and attention ranking. Cite anchors (F: for files, S: for symbols); each resolves to a path and line so you can act without re-reading the whole repo.","protected_paths":[".github",".github/CODEOWNERS","package-lock.json"],"schema_version":1,"size":{"bytes":3805193,"files":1029},"snapshot_version":48,"stack":{"name":"Node or TypeScript","pm":"npm"},"tier_hashes":{"map":"sha256:c20fea6d25c684bdfe1869f9bbf38795af8e115fd20319f2a0b9ff74c2aa384b","map_md":"sha256:4b9306d71a881e0734759dd869e5e3d6db6007af9c93a7cb84cbd327f9f91edf"}}
+{"commands":{"build":"","lint":"","test":"npm test"},"entrypoints":["bin/modonome.mjs"],"generated_at":"2026-07-28T03:56:41.447Z","generated_for":"modonome","governance":{"armed":false,"autonomy_enabled":false,"dry_run":true},"instructions":["AGENTS.md","CLAUDE.md","CODEX.md","CONTRIBUTING.md","README.md"],"language_mix":{"(none)":12,"cff":1,"css":50,"diff":18,"html":9,"js":19,"json":139,"jsonl":8,"md":144,"mjs":351,"patch":40,"png":5,"py":4,"sh":1,"svg":2,"tf":4,"toml":2,"ts":61,"tsx":98,"txt":18,"webmanifest":1,"webp":1,"woff2":9,"xml":1,"yaml":9,"yml":22},"merkle_root":"sha256:927516ba4719dd9d0daf9e0a646b5aab75203f89518391c7672b9352ef1776ac","preamble":"Modonome snapshot. Read this before reading the repo. Tier 0 (signature.json) is the fingerprint: if merkle_root matches your last read, nothing changed. Tier 1 (map.json / map.md) lists modules, public API signatures, import edges, and attention ranking. Cite anchors (F: for files, S: for symbols); each resolves to a path and line so you can act without re-reading the whole repo.","protected_paths":[".github",".github/CODEOWNERS","package-lock.json"],"schema_version":1,"size":{"bytes":3805193,"files":1029},"snapshot_version":49,"stack":{"name":"Node or TypeScript","pm":"npm"},"tier_hashes":{"map":"sha256:7cc6bd85f66794cb7a97835e50d81caa455c010b2f6c0ff389946f26bd653eee","map_md":"sha256:c48fe07373862620edbca97882ed05cea4012c6d6c8fae99e355efe154ff1a7b"}}