[gha] Bump open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml

Bumps [open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml](https://github.com/open-edge-platform/orch-ci) from 5d5d08245bb57937b3bee043e5fb5e7590098051 to aff1e9efbc37ed254c0eea575f51d379f47dc9a0.
- [Commits](open-edge-platform/orch-ci@5d5d082...aff1e9e)

---
updated-dependencies:
- dependency-name: open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml
  dependency-version: aff1e9efbc37ed254c0eea575f51d379f47dc9a0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/post-merge-scorecard.yml

@@ -20,7 +20,7 @@ jobs:
       id-token: write
       contents: read
 
-    uses: open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml@5d5d08245bb57937b3bee043e5fb5e7590098051  # 2026.1.1
+    uses: open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml@aff1e9efbc37ed254c0eea575f51d379f47dc9a0  # 2026.1.1
     with:
       project_folder: "."
     secrets: