harden(ci): concurrency-cancel guard on canonical check workflows (#51)

Redistributes merged standards#122. Adds
`concurrency{cancel-in-progress:true}` to read-only check workflows
(governance.yml) and scopes affinescript-verify push where present. Zero
check coverage lost; read-only workflows only. 🤖 estate sweep

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/governance.yml

@@ -18,6 +18,14 @@ on:
   pull_request:
   workflow_dispatch:
 
+# Estate guardrail: cancel superseded runs so re-pushes / rebased PR
+# updates do not pile up queued runs against the shared account-wide
+# Actions concurrency pool. Applied only to read-only check workflows
+# (no publish/mutation), so cancelling a superseded run is always safe.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 permissions:
   contents: read