move concurrency configuration to the job level

(i haven't been able to find definitive documentation, but i suspect it's not supported at the composite action level)

Author: lisac

.github/actions/build-release-candidate/action.yml

@@ -7,10 +7,6 @@ outputs:
   image_cache_key:
     description: "Cache key for the .tar of the docker image"
     value: ${{ steps.create-image-identifier.outputs.image }}
-
-concurrency:
-  group: build-release-candidate-${{ github.repository }}-${{ github.ref }}
-  cancel-in-progress: false
 
 runs:
   using: "composite"

.github/workflows/build-and-publish.yml

@@ -52,7 +52,7 @@ jobs:
     name: Build and publish
     runs-on: ubuntu-latest
     needs: get-commit-hash
-    concurrency: build-and-publish-${{ inputs.app_name }}-${{ needs.get-commit-hash.outputs.commit_hash }}
+    concurrency: build-${{ inputs.app_name }}-${{ github.ref }}
 
     permissions:
       contents: read

.github/workflows/vulnerability-scans.yml

@@ -47,6 +47,8 @@ jobs:
     outputs:
       image: ${{ steps.build-release-candidate.outputs.image_cache_key }}
 
+    concurrency: build-${{ inputs.app_name }}-${{ github.ref }}
+    
     steps:
       - uses: actions/checkout@v4