fix(ci): lowercase 'molecule-ai/' in cross-repo workflow refs

Gitea is case-sensitive on owner slugs; canonical is lowercase
`molecule-ai/...`. Mixed-case `Molecule-AI/...` refs fail-at-0s
when the runner tries to resolve the cross-repo workflow / checkout.

Same fix as molecule-controlplane#12. Mechanical case-correction;
no behavior change beyond making CI resolve again.

Refs: internal#46

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.github/workflows/ci.yml

@@ -1,7 +1,7 @@
 name: ci
 
 # Mirror-guard CI. This repo is a publish artifact of the monorepo
-# `Molecule-AI/molecule-core/workspace/` directory — see README.
+# `molecule-ai/molecule-core/workspace/` directory — see README.
 #
 # Direct commits + PRs to this repo are no longer accepted; the
 # canonical edit point is the monorepo. This workflow exists only
@@ -34,7 +34,7 @@ jobs:
           # block on PR events but allow push events (for in-flight
           # work to land while the migration finishes).
           if [ "${{ github.event_name }}" = "pull_request" ]; then
-            echo "::error::This repo is a publish artifact of Molecule-AI/molecule-core."
+            echo "::error::This repo is a publish artifact of molecule-ai/molecule-core."
             echo "::error::Edit workspace/ in the monorepo and let the publish-runtime"
             echo "::error::workflow regenerate this mirror — do not PR here directly."
             echo "::error::See README.md for the new contribution flow."

.github/workflows/secret-scan.yml

@@ -14,7 +14,7 @@ name: Secret scan
 # Updates ride along automatically as the upstream regex set evolves.
 #
 # To update the regex set, edit
-# Molecule-AI/molecule-core/.github/workflows/secret-scan.yml.
+# molecule-ai/molecule-core/.github/workflows/secret-scan.yml.
 
 on:
   pull_request:
@@ -26,4 +26,4 @@ on:
 
 jobs:
   secret-scan:
-    uses: Molecule-AI/molecule-core/.github/workflows/secret-scan.yml@staging
+    uses: molecule-ai/molecule-core/.github/workflows/secret-scan.yml@staging