Shared workflows v4.0.1

Shared GitHub Actions workflows. Add one job per workflow to a caller in
.github/workflows/, pinned to this commit:

uses: zemd/js/.github/workflows/shared-benchmarks.yml@fb41af590e525c7846a8dce0286fa69ac89171f7 # v4.0.1
uses: zemd/js/.github/workflows/shared-ci.yml@fb41af590e525c7846a8dce0286fa69ac89171f7 # v4.0.1
uses: zemd/js/.github/workflows/shared-codeql.yml@fb41af590e525c7846a8dce0286fa69ac89171f7 # v4.0.1
uses: zemd/js/.github/workflows/shared-release.yml@fb41af590e525c7846a8dce0286fa69ac89171f7 # v4.0.1
uses: zemd/js/.github/workflows/shared-scorecard.yml@fb41af590e525c7846a8dce0286fa69ac89171f7 # v4.0.1
uses: zemd/js/.github/workflows/shared-zizmor.yml@fb41af590e525c7846a8dce0286fa69ac89171f7 # v4.0.1

Ready-to-copy callers: .github/workflows-examples.

Re-resolve this commit at any time:

gh api repos/zemd/js/git/ref/tags/v4 --jq .object.sha

Changes

Patch Changes

• Allow shared CI to succeed when tests produce no LCOV coverage files.

• Allow benchmark runs to succeed without publishing when the Bencher API key is missing.

---

What's Changed

• Allow shared CI to succeed when tests produce no LCOV coverage files by @zemd in #51
• Bump turbo from 2.10.8 to 2.10.9 in the development-dependencies group across 1 directory by @dependabot[bot] in #49
• Bump @types/node from 26.1.2 to 26.2.0 in the production-dependencies group across 1 directory by @dependabot[bot] in #48
• Allow benchmark runs to succeed without publishing when the Bencher API key is missing by @zemd in #50
• chore(release): version packages by @zemd-release-branchkeeper[bot] in #52

Full Changelog: v4.0.0...v4.0.1