ci: cut Actions burn in .github/workflows/k9-svc-validation.yml (scope push + concurrency-cancel)

Author: hyperpolymath

.github/workflows/k9-svc-validation.yml

@@ -1,5 +1,14 @@
 name: K9-SVC Validation
-on: [push, pull_request]
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+
+# Estate guardrail: scope push to default branches (PR fires once, not
+# push+PR) and cancel superseded runs. Safe — read-only PR check.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   validate: