[SINT-4729] Add dd-octo-sts policies

[ikraemer-dd]

What does this PR do?

This PR adds 2 policies that will be used by Workflows running in this project:

• .github/chainguard/self.github.pre-commit.pull-requests.sts.yaml policy will be used by reusable-pre-commit.yml
• .github/chainguard/self.github.release.master.sts.yaml will be used by release.yml

This PR does not change the way workflows work, and is hence a non-risky change.

Additional Notes

Review checklist

Please check relevant items below:

• This PR includes all newly recorded cassettes for any modified tests.

• This PR does not rely on API client schema changes.

  • The CI should be fully passing.

• Or, this PR relies on API schema changes and this is a Draft PR that includes tests.

  • Note: CI shouldn't be run on this Draft PR, as its expected to fail without the corresponding schema changes.

[jack-edmonds-dd]

/merge

[gh-worker-devflow-routing-ef8351]

View all feedbacks in Devflow UI.

2026-02-10 16:50:37 UTC ℹ️ Start processing command /merge

---

2026-02-10 16:50:43 UTC ℹ️ MergeQueue: waiting for PR to be ready

This pull request is not mergeable according to GitHub. Common reasons include pending required checks, missing approvals, or merge conflicts — but it could also be blocked by other repository rules or settings.
It will be added to the queue as soon as checks pass and/or get approvals. View in MergeQueue UI.
Note: if you pushed new commits since the last approval, you may need additional approval.
You can remove it from the waiting list with /remove command.

---

2026-02-10 20:51:06 UTC ⚠️ MergeQueue: This merge request was unqueued

devflow unqueued this merge request: It did not become mergeable within the expected time