ci: add concurrency cancel-in-progress to 4 workflows missing it

Same pattern as proven#115 / ephapax#248 / typed-wasm#120. Targets
the 4 affinescript workflows that lacked concurrency declarations
(release.yml has 3 jobs; publish-jsr / affine-vscode-publish /
instant-sync 1 each).

The big runners (ci.yml 6 jobs, casket-pages 2 jobs, codeql,
panic-attack, scorecard-enforcer, semgrep, stdlib-naming,
workflow-linter) already had concurrency — no change.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/affine-vscode-publish.yml

@@ -26,6 +26,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   publish:
     runs-on: ubuntu-latest

.github/workflows/instant-sync.yml

@@ -11,6 +11,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   dispatch:
     runs-on: ubuntu-latest

.github/workflows/publish-jsr.yml

@@ -34,6 +34,10 @@ permissions:
   contents: read
   id-token: write # JSR OIDC; no token secret needed
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   publish:
     runs-on: ubuntu-latest

.github/workflows/release.yml

@@ -27,6 +27,10 @@ on:
 permissions:
   contents: write
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   prepare:
     runs-on: ubuntu-latest