ci: fix coverage deployment and add workflow concurrency

Coverage artifact download now queries the latest successful test run
instead of relying solely on the workflow_run trigger event. Add
concurrency group to the test workflow to prevent Docker port conflicts
when multiple runs execute on the same runner.

Author: arcangelo7

.github/workflows/deploy-docs.yml

@@ -23,13 +23,21 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
+      - name: Find latest successful test run
+        id: find-run
+        run: |
+          RUN_ID=$(gh run list --workflow "Run tests" --branch main --status success --limit 1 --json databaseId --jq '.[0].databaseId')
+          echo "run-id=$RUN_ID" >> "$GITHUB_OUTPUT"
+        env:
+          GH_TOKEN: ${{ github.token }}
+
       - name: Download coverage artifact
-        if: github.event_name == 'workflow_run'
+        if: steps.find-run.outputs.run-id != ''
         uses: actions/download-artifact@v8
         with:
           name: coverage-report
           path: docs/public/coverage
-          run-id: ${{ github.event.workflow_run.id }}
+          run-id: ${{ steps.find-run.outputs.run-id }}
           github-token: ${{ github.token }}
         continue-on-error: true
 

.github/workflows/run_tests.yml

@@ -30,6 +30,10 @@ permissions:
 env:
   COVERAGE_REPORT_PATH: htmlcov
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   CheckCoverage:
     runs-on: ubuntu-latest