ci: cancel superseded runs on the five unguarded workflows

.github/workflows/check-unsafe-flags.yml

@@ -6,6 +6,10 @@ on:
   pull_request:
     branches: [ "main" ]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   dump-package-check:
     name: Dump Swift package (authoritative) and scan JSON

.github/workflows/claude-code-review.yml

@@ -10,6 +10,10 @@ on:
     #   - "src/**/*.js"
     #   - "src/**/*.jsx"
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   claude-review:
     # Optional: Filter by PR author

.github/workflows/codeql.yml

@@ -21,6 +21,13 @@ on:
   schedule:
     - cron: '20 11 * * 3'
 
+concurrency:
+  # event_name is part of the key so the weekly scheduled scan and a push scan of
+  # the same branch never cancel each other; within one event type, only the
+  # newest run of a branch survives.
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   analyze:
     name: Analyze

.github/workflows/examples.yml

@@ -4,6 +4,10 @@ on:
   pull_request:
     branches: [main]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 env:
   PACKAGE_NAME: MistKit
 

.github/workflows/swift-source-compat.yml

@@ -6,6 +6,10 @@ on:
   pull_request:
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   swift-source-compat-suite:
     name: Test Swift ${{ matrix.container }} For Source Compatibility Suite