chore: update cuioss-organization workflows to v0.2.8 (#46)

Updates workflow references to SHA
`d38bc3643f0d0faa34ece1c2d854cf97f9a0abd4` (v0.2.8)

This PR was automatically created by the cuioss-organization release
workflow.

Co-authored-by: cuioss-release-bot <action@github.com>

Author: cuioss-release-bot[bot]

.github/workflows/dependency-review.yml

@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   dependency-review:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@3f9cd7e3bb36442219efdc7d0e79aea15881dc78 # v0.2.7
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@d38bc3643f0d0faa34ece1c2d854cf97f9a0abd4 # v0.2.8
     permissions:
       contents: read
       pull-requests: write

.github/workflows/maven.yml

@@ -17,7 +17,7 @@ jobs:
     # Run on push events, OR on pull_request only if from a fork
     # This prevents duplicate runs: push handles internal branches, PR handles forks
     if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@3f9cd7e3bb36442219efdc7d0e79aea15881dc78 # v0.2.7
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@d38bc3643f0d0faa34ece1c2d854cf97f9a0abd4 # v0.2.8
     secrets:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
       OSS_SONATYPE_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }}

.github/workflows/scorecards.yml

@@ -13,7 +13,7 @@ permissions:
 
 jobs:
   analysis:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@3f9cd7e3bb36442219efdc7d0e79aea15881dc78 # v0.2.7
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@d38bc3643f0d0faa34ece1c2d854cf97f9a0abd4 # v0.2.8
     permissions:
       security-events: write
       id-token: write