fix(ci): harden CI cost, retire orphaned v0.10.9, drop stale CHANGELOG.md

.github/workflows/ci.yml

@@ -2,17 +2,23 @@ name: ci
 
 on:
   pull_request:
+    paths-ignore: ['**.md', 'docs/**', 'specs/**', '.specify/**']
   push:
     branches:
       - main
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 permissions:
   contents: read
 
 jobs:
   test:
     name: test
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - name: Checkout
         uses: actions/checkout@v7
@@ -62,6 +68,7 @@ jobs:
   shell-suites:
     name: shell suites
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - name: Checkout
         uses: actions/checkout@v7
@@ -87,6 +94,7 @@ jobs:
     # release-range audit separately. These explicit reads are required because
     # a job-level permissions block clears scopes not named here.
     if: github.event_name == 'pull_request'
+    timeout-minutes: 10
     permissions:
       contents: read
       pull-requests: read
@@ -106,6 +114,7 @@ jobs:
     name: integration tests
     runs-on: ubuntu-latest
     needs: test
+    timeout-minutes: 15
     steps:
       - name: Checkout
         uses: actions/checkout@v7

.github/workflows/release.yml

@@ -11,6 +11,7 @@ jobs:
   guard:
     name: release guard
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: read
@@ -69,6 +70,7 @@ jobs:
     name: release verification
     runs-on: ubuntu-latest
     needs: guard
+    timeout-minutes: 15
     steps:
       - name: Checkout tag
         uses: actions/checkout@v7
@@ -127,6 +129,7 @@ jobs:
     name: release shell suites
     runs-on: ubuntu-latest
     needs: guard
+    timeout-minutes: 10
     steps:
       - name: Checkout tag
         uses: actions/checkout@v7
@@ -150,6 +153,7 @@ jobs:
       - guard
       - verify
       - shell-suites
+    timeout-minutes: 15
     steps:
       - name: Checkout tag
         uses: actions/checkout@v7
@@ -171,6 +175,7 @@ jobs:
       - verify
       - shell-suites
       - docker-image
+    timeout-minutes: 15
     permissions:
       contents: write
     steps:
@@ -211,6 +216,7 @@ jobs:
     needs:
       - guard
       - publish-release
+    timeout-minutes: 15
     steps:
       - name: Checkout tag
         uses: actions/checkout@v7