[gha] Bump open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml (#355)

Bumps [open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml](https://github.com/open-edge-platform/orch-ci) from 2026.0.2 to 2026.0.4.
- [Commits](open-edge-platform/orch-ci@aca1e7a...c6a01b8)

---
updated-dependencies:
- dependency-name: open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml
  dependency-version: 2026.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/post-merge-scorecard.yml

@@ -22,7 +22,7 @@ jobs:
       id-token: write
       contents: read
 
-    uses: open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml@aca1e7ad41fcb49f5da7cd31cecdca46822b25fa  # 2026.0.2
+    uses: open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml@c6a01b803d3c045de1b1b2f788a47eaaefed3f07  # 2026.0.4
     with:
       project_folder: "."
     secrets: