gha-concurrency-audit — find the workflows that let two deploys race

A GitHub Actions workflow without a concurrency group is a race waiting for a busy afternoon: two merges to main run deploy at once and the slower one wins, while every superseded pull-request push keeps burning runner minutes. gha-concurrency-audit reads the workflows, works out which ones can actually collide, and tells you the group expression to paste.