fix: correct ci concurrency and checkout configuration

- Remove sparse-checkout from supply-chain-pr workflow to allow local docker builds
- Update concurrency groups in docker-build, quality-checks, and codeql to use strict branch refs
- Remove SHA component from integration test concurrency groups to enable proper cancellation of stale runs
- Ensures rapid pushes now correctly cancel previous in-progress CI jobs instead of queuing indefinitely

.github/workflows/codeql.yml

@@ -17,7 +17,7 @@ on:
     - cron: '0 3 * * 1'
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
   cancel-in-progress: true
 
 env: