ci(actions): bound superseded PR runs

.github/actionlint.yaml

@@ -0,0 +1,7 @@
+paths:
+  .github/workflows/prepare-pypi-release.yml:
+    ignore:
+      - 'unexpected key "queue" for "concurrency" section'
+  .github/workflows/publish-pypi.yml:
+    ignore:
+      - 'unexpected key "queue" for "concurrency" section'

.github/workflows/prepare-pypi-release.yml

@@ -22,6 +22,11 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.repository }}
+  queue: max
+  cancel-in-progress: false
+
 jobs:
   prepare-release:
     runs-on: ubuntu-latest
@@ -215,7 +220,7 @@ jobs:
 
       - name: Clean local release artifacts
         run: |
-          rm -rf build dist *.egg-info release-sbom.cdx.json release-provenance.json
+          rm -rf -- build dist ./*.egg-info release-sbom.cdx.json release-provenance.json
 
       - name: Commit and push release branch
         run: |

.github/workflows/publish-pypi.yml

@@ -9,6 +9,11 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.repository }}
+  queue: max
+  cancel-in-progress: false
+
 jobs:
   build:
     runs-on: ubuntu-latest