• ci: BREAKING CHANGE: split generated workflows into lightweight platform jobs and canonical Ubuntu ARM jobs, set read-only workflow permissions, and expand Rust checks to release tests and release Clippy #997