Fixing actions, removing deprecated stuff, etc

[lucasparreira]

This is mostly fixing broken actions and improving security.

Details

• Getting rid of "set-output" as it's deprecated.
• Moving build/commit workflow to "publish" action, which is also now scoped to "production".
• Updating neofinancial/coverage-upload-action to latest to fix coverage job issue.
• As we're no longer building/committing in the pull request action, added a note in the readme file on how to test feature branches.
• Changing all runners to Ubuntu 22.04.
• Limiting access for GITHUB_TOKEN.

Additional context

N/A

[Copilot]

Pull Request Overview

This PR modernizes GitHub Actions workflows by removing deprecated features and improving security practices. The changes move build/commit operations from pull request workflow to the publish workflow, update deprecated GitHub Actions syntax, and implement better access controls.

• Replaces deprecated set-output commands with the new $GITHUB_OUTPUT syntax
• Moves build and commit operations from pull request workflow to production-scoped publish workflow
• Updates runner versions and implements stricter token permissions

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
README.md	Adds documentation for testing feature branches before release
.github/workflows/pull-request.yaml	Removes build/commit steps and updates deprecated syntax
.github/workflows/publish.yaml	Consolidates build/commit operations with production environment scoping
.github/workflows/ci.yaml	Updates deprecated set-output syntax

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}