Disable interactive hover treatment for the static AI × Security card

[Copilot]

This updates the new AI × Security section to align the non-link Agent Runtime Governance card with its actual behavior. The card remains informational, but no longer presents the hover affordances used for clickable project links.

• Static card behavior

  • Mark the Agent Runtime Governance entry as a non-interactive card variant.
  • Remove hover lift/shadow treatment from that variant so it does not look clickable.

• Scope

  • Keeps all linked project cards unchanged.
  • Limits the change to the single review-thread concern in index.html.

<div class="gh-card static reveal">
  ...
</div>

.gh-card.static { cursor: default; }
.gh-card.static:hover { box-shadow: none; transform: none; }