GitHub Actions Workflow Generator — least-privilege CI/CD YAML

Generate a GitHub Actions workflow with pinned actions, least-privilege permissions, dependency caching and concurrency control.