Standardize bounded CI controls

[Jnapier2]

What changed

• Added a manual workflow_dispatch trigger for maintenance validation.
• Added workflow concurrency so superseded runs are cancelled instead of consuming duplicate capacity.
• Added a 10-minute job timeout to prevent an unexpected test hang from running indefinitely.
• Disabled persisted checkout credentials because the workflow only reads and tests repository content.

Why

These controls make CI behavior more predictable and align the repository with the portfolio's fail-bounded, least-authority operating standard. Application code, tests, dependencies, release contents, licensing, and runtime behavior are unchanged.

Validation plan

• Confirm the workflow parses and starts for this pull request.
• Confirm compilation and the Windows regression suite pass.
• Merge only after the branch remains limited to .github/workflows/test.yml.

Copyright © 2026 Gateway Information Group LLC. All rights reserved.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.