ci: Standardize and optimize GitHub Actions workflows

.github/workflows/android_pr_check.yml

@@ -1,14 +1,24 @@
-name: Android Pull Request Check
+name: Android - Pull Request Check
+
 on:
   pull_request:
     branches: [ main ]
-    types: [opened, synchronize, reopened, ready_for_review] 
-  # Allows you to run this workflow manually from the Actions tab
+    types: [opened, synchronize, reopened, ready_for_review]
+    paths:
+      - 'FloconAndroid/**'
+      - '.github/workflows/android_pr_check.yml'
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
 jobs:
   build:
-    name: Build FloconAndroid
+    name: Build and Test
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
@@ -23,6 +33,6 @@ jobs:
       - name: Set up Gradle
         uses: gradle/actions/setup-gradle@v5
 
-      - name: Build with Gradle
+      - name: Run tests and assemble
         working-directory: FloconAndroid
-        run: ./gradlew assemble
+        run: ./gradlew test assemble

.github/workflows/desktop_pr_check.yml

@@ -1,17 +1,24 @@
-name: Desktop Pull Request Check
+name: Desktop - Pull Request Check
+
 on:
   pull_request:
     branches: [ main ]
     types: [opened, synchronize, reopened, ready_for_review]
     paths:
       - 'FloconDesktop/**'
       - '.github/workflows/desktop_pr_check.yml'
-  # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
 jobs:
   build:
-    name: Build FloconDesktop
+    name: Build and Test
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
@@ -26,6 +33,6 @@ jobs:
       - name: Set up Gradle
         uses: gradle/actions/setup-gradle@v5
 
-      - name: Build with Gradle
+      - name: Run tests and assemble
         working-directory: FloconDesktop
-        run: ./gradlew assemble
+        run: ./gradlew allTests assemble

.github/workflows/docs.yml

@@ -1,21 +1,34 @@
-name: docs 
+name: Docs - Build and Deploy
 
 on:
   push:
     branches:
-      - master 
       - main
+    paths:
+      - 'docs/**'
+      - 'mkdocs.yml'
+      - '.github/workflows/docs.yml'
   pull_request:
     branches:
-      - master
       - main
+    paths:
+      - 'docs/**'
+      - 'mkdocs.yml'
+      - '.github/workflows/docs.yml'
+
+concurrency:
+  group: docs-${{ github.ref }}
+  cancel-in-progress: true
 
 permissions:
-  contents: write
+  contents: read
 
 jobs:
   deploy:
+    name: Deploy to GitHub Pages
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6

.github/workflows/publish_android.yml

@@ -1,34 +1,53 @@
-name: Publish Android libs to maven MavenCentral
+name: Android - Publish to MavenCentral
+
 on:
   release:
-    types: [released, prereleased]
-  # Allows you to run this workflow manually from the Actions tab
+    types: [published, released, prereleased]
   workflow_dispatch:
+    inputs:
+      version:
+        description: 'Release version (e.g. 1.9.6). Leave empty to use tag ref'
+        required: false
+        type: string
+
+permissions:
+  contents: read
+
 jobs:
   publish:
-    name: Release build and publish
-    runs-on: macOS-latest
+    name: Publish to MavenCentral
+    runs-on: ubuntu-latest
     steps:
       - name: Check out code
         uses: actions/checkout@v6
+
       - name: Set up JDK 21
         uses: actions/setup-java@v5
         with:
           distribution: 'zulu'
           java-version: 21
+
+      - name: Set up Gradle
+        uses: gradle/actions/setup-gradle@v5
+
+      - name: Run unit tests
+        working-directory: FloconAndroid
+        run: ./gradlew test
+
       - name: Check release # be sure op and no-op versions are building
         working-directory: FloconAndroid
         run: ./gradlew :sample-android-only:assemble
+
       - name: Publish to MavenCentral
-        run: |
-            ./gradlew \
-              publishToMavenCentral \
-              --no-configuration-cache
         working-directory: FloconAndroid
         env:
-          PROJECT_VERSION_NAME: ${{ github.ref_name }}
+          PROJECT_VERSION_NAME: ${{ inputs.version || github.ref_name }}
           ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.ORG_GRADLE_PROJECT_MAVENCENTRALUSERNAME }}
           ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.ORG_GRADLE_PROJECT_MAVENCENTRALPASSWORD }}
           ORG_GRADLE_PROJECT_signingInMemoryKeyId: ${{ secrets.ORG_GRADLE_PROJECT_SIGNINGINMEMORYKEYID }}
           ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.ORG_GRADLE_PROJECT_SIGNINGINMEMORYKEYPASSWORD }}
           ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.ORG_GRADLE_PROJECT_SIGNINGINMEMORYKEY }}
+        run: |
+          ./gradlew \
+            publishToMavenCentral \
+            --no-configuration-cache