chore(workflows): standardize to ci/audit/deny/scorecard/release

- Kept: ['cargo-deny.yml', 'ci.yml', 'codeql-rust.yml', 'scorecard.yml']
- Renamed: ['cargo-deny.yml -> deny.yml', 'codeql-rust.yml -> audit.yml']
- Deleted: 13 obsolete workflows
- Concurrency blocks ensured on all kept workflows
- Pinned 0 tag-based action refs to SHAs

Author: KooshaPari

.github/workflows/codeql-rust.yml .github/workflows/audit.yml.github/workflows/codeql-rust.yml renamed to .github/workflows/audit.yml

@@ -1,9 +1,4 @@
 name: CodeQL (Rust)
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-
 on:
   push:
     branches: [main]
@@ -19,6 +14,11 @@ on:
     - cron: '17 4 * * 2'
   workflow_dispatch:
 
+
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 jobs:
   analyze:
     name: Analyze (rust)

.github/workflows/cargo-audit.yml

@@ -10,10 +10,10 @@ permissions:
   contents: read
   pull-requests: read
 
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
-
 jobs:
   rust-quality:
     name: Rust Quality (reusable)

.github/workflows/cargo-machete.yml

@@ -18,6 +18,11 @@ on:
 
 permissions: {}
 
+
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 jobs:
   cargo-deny:
     runs-on: ubuntu-24.04