refactor(ci): Consolidate CI and TDD workflows into single pipeline

[TGTGamer]

Summary

Consolidates CI workflows, adds reusable composite actions, and merges related workflows for a cleaner TDD flow and easier maintenance.

Changes

New composite actions

Action	Purpose
security-preamble	Harden Runner + optional Workflow Telemetry. Used by security and management workflows.
checkout-repo	Lightweight checkout with submodules (no pnpm/node). For scans and chores.
git-ssh-setup	SSH key creation + git config for signed commits. For workflows that push.

Workflow updates

• codeql, security-dependency-review, security-scorecard, security-snyk, security-secrets, security-infrastructure_scan, management-github_management, chore-readme-fun: Use new composite actions instead of duplicated steps.
• publish: Uses ci-setup (added optional registry-url for npm publish).
• ci-setup: Added optional registry-url input for publish workflows.

Merged workflows

• tests-repo-branch-sync + tests-repo-merge-sync → tests-repo-sync.yml
  • ensure-branch: On push (non-main), ensure matching branch exists in Eventiva/tests.
  • merge-on-pr-close: On PR closed (merged to main), merge tests branch into default.

Benefits

• ~350 lines removed across workflows.
• Shared setup via composite actions; changes in one place apply everywhere.
• Fewer workflow files; related logic grouped together.
• Simpler to understand and maintain.

  

[trunk-io]

Merging to main in this repository is managed by Trunk.

• To merge this pull request, check the box to the left or comment /trunk merge below.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: ee442498-d29c-4bdb-9618-5f59e7ac35a2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch cursor/ci-test-workflow-consolidation-4bbd

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch cursor/ci-test-workflow-consolidation-4bbd

📝 Coding Plan

• Generate coding plan for human review comments

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}