fix no cargo deny and markdownlint in action

.github/actions/basics/action.yml

@@ -13,14 +13,24 @@ runs:
         toolchain: ${{ inputs.rust_nightly }}
         components: clippy, rustfmt
 
+    - name: Install cargo-deny
+      run: |
+        cargo install --locked cargo-deny
+        cargo deny init
+      shell: bash
+
     - uses: Swatinem/rust-cache@v2
 
-    # 3. Set up Node.js for markdownlint
+    # 3. Set up env for markdownlint
     - name: Set up Node.js
       uses: actions/setup-node@v4
       with:
         node-version: "latest"
 
+    - name: Install markdownlint-cli
+        run: npm install -g markdownlint-cli
+      shell: bash
+
     # 4. Run pre-commit hooks on all files
     - name: Run pre-commit
       run: |

.github/workflows/pr.yml

@@ -3,11 +3,22 @@ name: PR Checks
 on:
   pull_request:
 
+concurrency:
+  group:
+    ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+env:
+  rust_nightly: nightly-2024-12-02
+
 jobs:
   basics:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - uses: ./.github/actions/basics
         with:
-          rust_nightly: nightly-2024-12-02
+          rust_nightly: ${{ env.rust_nightly }}