Move PR comment and version check into composite actions (#64)

* ci: move the PR test comment into a composite action

Call it from the workflow with the self-repository syntax, so no checkout
is needed. One run per pull request at a time. Fold the merge commit
line into the archived table.

* chore(deps): update catalogs + secure ci

- Simplify `runner` commands in `autofix.yml` and `pages.yml`
- Fix `GITHUB_ACTION_PATH` usage in `pr-test-comment` action
- Migrate `package.json` to Bun catalogs for dependency management
- Update `dprint`, `runner-run`, and `tombi` to latest versions
- Add `.markdownlint.json` to disable line-length rules

* ci: move the release version check into a composite action

Both publish workflows call it with package and tag-prefix inputs. The
two wrapper modules fold into the shared one, which reads its config
from env. Import action modules by GITHUB_ACTION_PATH.

* ci: resolve Bun catalog specs in the integration matrix

The bw CLI pin now lives under catalogs.ci, so the config step follows
catalog: references before parsing the version.

* ci: collapse the PR test comment when the package is unchanged

Gate on files that ship in the wheel instead of any .py file, and post
the comment inside a details block when none changed.

* revert: add back provenance

Adapted the workflow from an existing PR comment bot configuration.

Signed-off-by: Kaj Kowalski <info@kajkowalski.nl>

---------

Signed-off-by: Kaj Kowalski <info@kajkowalski.nl>

Author: kjanat

.github/actions/pr-test-comment/action.yml

@@ -0,0 +1,35 @@
+# yaml-language-server: $schema=https://www.schemastore.org/github-action.json
+---
+name: PR Test Comment
+description: Create, update, and archive the "Test this PR" uvx comment on a pull request.
+author: Kaj Kowalski
+branding: { icon: message-square, color: blue }
+
+inputs:
+  cli-name:
+    description: "Console script to run through `uvx`. Defaults to the repository name."
+    default: ""
+  python-version:
+    description: "Python version passed as `uvx -p`. Empty omits the flag."
+    default: ""
+  cli-examples:
+    description: "Example commands for the collapsed section; `{cmd}` expands to the `uvx` invocation."
+    default: ""
+  github-token:
+    description: "Token with `issues:write` and `pull-requests:write`."
+    default: ${{ github.token }}
+
+runs:
+  using: composite
+  steps:
+    - name: Create, update, or archive PR comment
+      uses: actions/github-script@v9
+      env:
+        CLI_NAME: ${{ inputs.cli-name }}
+        PYTHON_VERSION: ${{ inputs.python-version }}
+        CLI_EXAMPLES: ${{ inputs.cli-examples }}
+      with:
+        github-token: ${{ inputs.github-token }}
+        script: |
+          const { default: comment } = await import(`${process.env.GITHUB_ACTION_PATH}/pr-comment.mjs`);
+          return await comment({ core, context, github });