fix(ci): repair corrupted rsr-antipattern.yml from #17

[hyperpolymath]

PR #17 was auto-merged but landed corrupted YAML — the original sweep built its canonical via gh api --jq '.content' piped through PowerShell, but gh line-wraps base64 in the terminal pipe, so each chunk was decoded separately and the resulting file has mid-word line breaks (# SPDX-License-Id\nentifier:, name: RSR A\nnti-Pattern, etc.). GitHub Actions can't parse it — the workflow completes in 0 seconds with no jobs.

This PR replaces the file with the correct content, built via raw byte download (Accept: application/vnd.github.raw) and [System.IO.File]::WriteAllBytes so no pipe touches the bytes. Round-trip byte-verified against canonical (8553 bytes, 1 PYEOF, no orphan BUILTIN_GLOBS, DIR_NAMES_ALLOWED preserved). Same fix as hyperpolymath/stapeln#34.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/actions/checkout	de0fac2e4500dabe0009e67214ff5f5447ce83dd	🟢 5.7	Details Check Score Reason Maintained ⚠️ 0 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo Code-Review 🟢 10 all changesets reviewed Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 3 dependency not pinned by hash detected -- score normalized to 3 Packaging ⚠️ -1 packaging workflow not detected License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 9 security policy file detected Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches SAST 🟢 8 SAST tool detected but not run on all commits

Scanned Files

• .github/workflows/rsr-antipattern.yml