chore: bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#2589)

ossf/scorecard-action 2.4.3 to 2.4.4. Reviewed and approved by @phipag. Review performed by Claude. Pinned SHA verified against the v2.4.4 tag. No input schema or token permission changes.

Author: dependabot[bot]

.github/workflows/security-scorecard.yml

@@ -40,7 +40,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Run Analysis
-        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
+        uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
         with:
           results_file: results.sarif
           results_format: sarif