ci: tolerate skipped build in ci-pass gate (#2190)

The ci-pass step treated needs.build.result != "success" as failure,
which made every release-bot push fail: build's own if: skips on
ci(release) commits to prevent publish loops, so build.result is
"skipped" by design on those runs.

Replace the per-job result checks with the standard contains pattern
over needs.*.result. Failure and cancelled still fail the gate;
skipped is tolerated symmetrically for build and integration. New
needed jobs added later inherit the rule without further edits.

Author: just-jeb

.github/workflows/ci.yml

@@ -123,15 +123,8 @@ jobs:
     if: always()
     runs-on: ubuntu-latest
     steps:
-      - run: |
-          if [ "${{ needs.build.result }}" != "success" ]; then
-            echo "Build failed or was cancelled"
-            exit 1
-          fi
-          if [ "${{ needs.integration.result }}" != "success" ] && [ "${{ needs.integration.result }}" != "skipped" ]; then
-            echo "Integration tests failed or were cancelled"
-            exit 1
-          fi
+      - if: contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled')
+        run: exit 1
 
   publish:
     needs: [build, integration]