feat(PLT-3267): skip redundant tests on deploy when verified on PR

[skridlevsky]

What

Skips redundant test suites on the main/deploy run when the same content already passed on the PR. Adds a skip-verified-tests input (default true).

Why

The deploy workflow re-runs the exact suites that already passed on the PR, gating production deploys on a second run that produces no new signal.

How

• PR workflow (record-verification): after all enabled suites pass, pushes a marker ref refs/tests-passed/<tree> keyed on the git tree-hash of the merge ref.
• Deploy workflow (check-verification): computes the merged commit's tree-hash, looks up the marker, and skips the redundant suites when it matches.
• Works because repos are squash-merge + strict branch protection (up-to-date required), so the PR's merge-ref tree equals the squashed commit's tree on main.

Safety

• Fail-safe, never fail-open: missing or mismatched marker (hotfix, direct push to main, stale PR, revert mode) → suites run as normal.
• Escape hatch: set skip-verified-tests: false to always re-run on main.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud