CI: standardize Actions (paths + concurrency + runners)

[0xLeif]

Standardizes the GitHub Actions workflows to match the CorvidLabs/merlin CI standard.

ci.yml (push + pull_request CI)

• Added a paths: filter to push and pull_request so docs/README-only changes no longer trigger the full matrix. Set covers the source CI actually exercises: src/**, tests/**, Cargo.toml, Cargo.lock, action.yml, fledge.toml, site/**, vscode-extension/**, plus .github/workflows/ci.yml.
• Added a concurrency: group (ci-${{ github.ref }}) with cancel-in-progress: true.
• Added timeout-minutes to every job.
• Bumped actions/checkout@v4 -> @v5.
• Runners left GitHub-hosted (ubuntu/macos/windows-latest) — correct for a PUBLIC repo.

pages.yml (deploy site)

• Already had site-scoped paths: + concurrency + ubuntu-latest; added timeout-minutes and bumped checkout to v5.

release.yml (tag push)

• Tag-triggered, so no paths: added. Added timeout-minutes; bumped checkout to v5. Runners already GitHub-hosted.

Mirrors the CorvidLabs/merlin CI standard.

[gemini-code-assist]

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

[github-actions]

✅ Corvin says...

      _
    <(^\  .oO(Caw! ^v^)
     |/(\
      \(\\
      " "\\

"Caw! Your code sparkles like a dropped french fry."

CI Summary

Check	Status
Validate action.yml	✅ Passed
Dependency Audit	✅ Passed
Code Coverage	✅ Passed
Format Check	✅ Passed
Docs Site	✅ Passed
Spec Validation	✅ Passed
Tests (build, test, clippy)	✅ Passed
VS Code Extension	✅ Passed

📋 Spec Validation Details

✅ SpecSync: Passed

Metric	Value
Specs checked	58
Passed	58
Errors	0
Warnings	0
File coverage	100% (74/74)
LOC coverage	100% (33727/33727)

---

Generated by specsync · Run specsync check --format github to reproduce

---

_{Powered by corvid-pet}