[scouten-adobe]

Changes in this pull request

The existing CI foundation has fallen behind the setup in raw-crypto. Align the workflows with that setup while preserving cimpl's single-crate configuration and Rust 1.87 MSRV.

Add read-only CI permissions, concurrency controls, same-repository/fork PR gating, updated SHA-pinned actions, Windows ARM tests, Android and iOS build checks, internal documentation checks, and workflow linting. Collect coverage on stable Rust and run ordinary tests on the MSRV. Split release-plz publication and release-PR updates into ordered jobs, with cleanup limited to closed release branches that do not back an open PR.

Crypto-specific feature matrices and fuzz campaigns are not copied because they do not apply to this crate.

Local validation:

• actionlint .github/workflows/ci.yml .github/workflows/pr_title.yml .github/workflows/release.yml: passed.
• cargo test --all-features: passed (51 unit tests and 2 doc tests; 27 doc tests ignored).
• cargo clippy --all-features --all-targets -- -Dwarnings: passed.
• git diff --check: passed.

Hosted platform jobs and release automation have not been executed locally.

Checklist

• This PR represents a single feature, fix, or change.
• All applicable changes have been documented.
• Any TO DO items (or similar) have been entered as GitHub issues and the link to that issue has been included in a comment.

No new TODO items were introduced.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 64.50%. Comparing base (80f4577) to head (a91e667).

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #19   +/-   ##
=======================================
  Coverage   64.50%   64.50%           
=======================================
  Files           2        2           
  Lines         755      755           
=======================================
  Hits          487      487           
  Misses        268      268           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[tmathern]

At this point, it would be worthwhile to consider having our workflows themselves in a repo, and pull them in in the other repos. So we have a centralized lcoation to maintain.