chore: enforce global strictly sequential pipeline

.gitea/workflows/ci.yml

@@ -3,6 +3,10 @@ name: CI - Lint, Typecheck & Test
 on:
   pull_request:
 
+concurrency:
+  group: deploy-pipeline
+  cancel-in-progress: true
+
 jobs:
   quality-assurance:
     runs-on: docker

.gitea/workflows/deploy.yml

@@ -401,7 +401,7 @@ jobs:
   # ──────────────────────────────────────────────────────────────────────────────
   lighthouse:
     name: ⚡ Lighthouse
-    needs: [prepare, deploy]
+    needs: [prepare, deploy, smoke_test]
     continue-on-error: true
     if: success() && needs.prepare.outputs.target != 'skip' && needs.prepare.outputs.target != 'branch'
     runs-on: docker
@@ -472,7 +472,7 @@ jobs:
   # ──────────────────────────────────────────────────────────────────────────────
   wcag:
     name: ♿ WCAG
-    needs: [prepare, deploy, smoke_test]
+    needs: [prepare, deploy, smoke_test, lighthouse]
     continue-on-error: true
     if: success() && needs.prepare.outputs.target != 'skip' && needs.prepare.outputs.target != 'branch'
     runs-on: docker
@@ -543,7 +543,7 @@ jobs:
   # ──────────────────────────────────────────────────────────────────────────────
   quality_assertions:
     name: 🛡️ Quality Gates
-    needs: [prepare, deploy, smoke_test]
+    needs: [prepare, deploy, smoke_test, lighthouse, wcag]
     continue-on-error: true
     if: success() && needs.prepare.outputs.target != 'skip' && needs.prepare.outputs.target != 'branch'
     runs-on: docker