ci: refactor workflows to use storytold/craft-common-actions

[dylanmtaylor]

Summary

Refactors repetitive CI/CD workflows across EffectCraft to call centralized reusable workflows and composite actions hosted in the organization repository storytold/craft-common-actions.

Design Decisions

• Hosted in Organization Repository: Workflows live under storytold/craft-common-actions (no personal fork/repository).
• Intentionally Tracks @main (Not SHA Pinned): Callers deliberately track @main with an inline explanation comment so that org-wide CI improvements, security fixes, and build optimizations propagate across all 13+ craftapps automatically without requiring individual PR churn in every repository.
• Explicit Secrets: Only the exact required signing secrets are passed explicitly (secrets: inherit is avoided).
• Node 24 Runtimes: All composite and third-party actions inside storytold/craft-common-actions are updated to Node 24 (and pinned internally to immutable commit SHAs), eliminating Node 20 deprecation warnings.
• Strict Verification: Build utilities like nfpm, actionlint, and trunk are verified against SHA256 checksums.
• Preserves 100% of existing packaging, release matrix, and linting semantics for EffectCraft.