Various actions updates

* Sort "on" targets
* Ensure push branch-ignores for dependabot and renovate
* Ensure concurrency section
* Ensure permissions section
* Ensure we don't word-wrap long lines

Author: Fryguy

.github/workflows/ci.yaml

@@ -1,19 +1,25 @@
----
 name: CI
 on:
-  push:
   pull_request:
-  workflow_dispatch:
+  push:
+    branches-ignore:
+    - dependabot/*
+    - renovate/*
   schedule:
   - cron: 0 0 * * 0
+  workflow_dispatch:
+concurrency:
+  group: "${{ github.workflow }}-${{ github.ref }}"
+  cancel-in-progress: true
+permissions:
+  contents: read
 jobs:
   ci:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
     - name: Set up registry credentials
-      if: "${{ github.ref == 'refs/heads/master' && github.repository_owner == 'ManageIQ'
-        }}"
+      if: "${{ github.ref == 'refs/heads/master' && github.repository_owner == 'ManageIQ' }}"
       run: |
         echo "REGISTRY_USERNAME=${{ secrets.REGISTRY_USERNAME }}" >> $GITHUB_ENV
         echo "REGISTRY_PASSWORD=${{ secrets.REGISTRY_PASSWORD }}" >> $GITHUB_ENV