A shared workflow pins an action SHA while the action still downloads a floating helper tool version at runtime during a failover rehearsal

The action reference looks immutable, yet part of the execution path still depends on mutable remote state. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.