[gha] Bump open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml

Bumps [open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml](https://github.com/open-edge-platform/orch-ci) from 2026.0.19 to 2026.1.1.
- [Commits](open-edge-platform/orch-ci@d40dfda...bf82f79)

---
updated-dependencies:
- dependency-name: open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml
  dependency-version: 2026.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/post-merge-scorecard.yml

@@ -22,7 +22,7 @@ jobs:
       id-token: write
       contents: read
 
-    uses: open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml@d40dfda9598df896aa20cb1dc2c950d6444e8fa7  # 2026.0.19
+    uses: open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml@bf82f7924caaac6ba2f388b6ec6ac4edd65f48ee  # 2026.1.1
     with:
       project_folder: "."
     secrets: