Add a workflow-level `concurrency` block so redundant in-progress runs are cancelled when new commits are pushed to the same PR or branch.