repo: move the wall to the object-store scan, pin the e2e workflow

minspec/.github#10 pins the content surface to every tracked blob,
read from the object store, bytewise, symlinks never followed. Point
the wall step at that merge. The e2e job called the reusable workflow
in workbench at the mutable `dev`; pin it to the current dev commit.

Source: original
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Jj94rkp3tfHAxUkTCthgY
Apply-Push-Job: 20260902T004040Z-apply-push-42a20d
Patch-SHA256: ab87de44654606fe4f2e2e2132496610a1aa6e59013b28a94c079f930ed6f575

Author: Apply Push Bridge

.github/workflows/ci.yml

@@ -14,7 +14,7 @@ jobs:
         with:
           persist-credentials: false
       - name: term wall
-        uses: minspec/.github/.github/actions/term-wall@6175b67bd0df4710dd0bb8b79df413b452265c6c # minspec/.github#8
+        uses: minspec/.github/.github/actions/term-wall@a5d88bb5b9bb744cf23c8829436e32f03d58c79d # minspec/.github#10
         env:
           TERM_WALL: ${{ vars.TERM_WALL }}
       - name: JSON validity

.github/workflows/e2e.yml

@@ -10,7 +10,7 @@ permissions:
   contents: read
 jobs:
   e2e:
-    uses: minspec/workbench/.github/workflows/e2e.yml@dev
+    uses: minspec/workbench/.github/workflows/e2e.yml@a84bc5568a33220fd7b4037345c2b38186cff29d # dev
     with:
       fixtures_ref: ${{ github.event.pull_request.head.sha || github.sha }}
       workbench_ref: dev