Shared workflows v4.0.3

Shared GitHub Actions workflows. Add one job per workflow to a caller in
.github/workflows/, pinned to this commit:

uses: zemd/js/.github/workflows/shared-benchmarks.yml@af81e6fec18025e6a5b177e4397f7b3f277bfd15 # v4.0.3
uses: zemd/js/.github/workflows/shared-ci.yml@af81e6fec18025e6a5b177e4397f7b3f277bfd15 # v4.0.3
uses: zemd/js/.github/workflows/shared-codeql.yml@af81e6fec18025e6a5b177e4397f7b3f277bfd15 # v4.0.3
uses: zemd/js/.github/workflows/shared-release.yml@af81e6fec18025e6a5b177e4397f7b3f277bfd15 # v4.0.3
uses: zemd/js/.github/workflows/shared-scorecard.yml@af81e6fec18025e6a5b177e4397f7b3f277bfd15 # v4.0.3
uses: zemd/js/.github/workflows/shared-zizmor.yml@af81e6fec18025e6a5b177e4397f7b3f277bfd15 # v4.0.3

Ready-to-copy callers: .github/workflows-examples.

Re-resolve this commit at any time:

gh api repos/zemd/js/git/ref/tags/v4 --jq .object.sha

Changes

Patch Changes

• Skip release jobs when no package or shared workflow release is pending, using exact release lookups and a credential-isolated validated plan.

---

What's Changed

• Add workflow for regenerating Figma API by @zemd in #62
• Bump the production-dependencies group across 2 directories with 1 update by @dependabot[bot] in #56
• chore(release): version packages by @zemd-release-branchkeeper[bot] in #63
• Bump the development-dependencies group across 2 directories with 6 updates by @dependabot[bot] in #61
• Add workflow for oxfmt updates by @zemd in #64
• Add new artifact handling for release plans by @zemd in #65
• chore(release): version packages by @zemd-release-branchkeeper[bot] in #66

Full Changelog: v4.0.2...v4.0.3