fix(ci): make the Hypatia wrapper start — grant what the reusable requests

[hyperpolymath]

hypatia-scan-reusable.yml declares permissions: security-events: write; this caller granted security-events: read. GitHub fails a reusable call at startup when the called workflow requests a permission the caller does not grant, so every trigger here has ended in startup_failure — the scan has never produced a check or a finding.

Aligns the wrapper with the estate's working template (pull-requests: write + security-events: write), adds secrets: inherit so the read-only HYPATIA_SCAN_PAT reaches the reusable, and names the caller hypatia so the published check is the canonical hypatia / Hypatia Neurosymbolic Analysis.

Found by reading check/workflow history rather than repository files: the wrapper looks fine in a file listing — it is the run that never starts.

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: d9d1e212-a6bc-43d8-a91e-685577109a61

📥 Commits

Reviewing files that changed from the base of the PR and between f1f9a24 and 4abb8d4.

📒 Files selected for processing (1)

• .github/workflows/hypatia-scan.yml

 __________________________________________________________________________________________________________________________________________________________________________________________________________________
< In software, we rarely have meaningful requirements. Even if we do, the only measure of success that matters is whether our solution solves the customer's shifting idea of what their problem is. - Jeff Atwood >
 ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}