refactor: consolidate CI/CD workflows (#495)

* refactor: consolidate CI/CD workflows following flash-worker pattern

Merge 5 scattered workflow files (CI-pytests, CI-codeql, CI-e2e,
CD-publish_to_pypi, CD-test_publish_to_pypi) into 2 consolidated
files (ci.yml, cd.yml). Add Makefile so local dev mirrors CI.

- ci.yml: test + e2e + codeql as parallel quality gates + validation job
- cd.yml: staging TestPyPI + production release-please/PyPI publish
- Makefile: setup, test, build, verify, quality-check targets
- Normalize setup-uv to v7 across all jobs
- Disable notify-workers pending optimization (85min wasted runner time)
- vhs.yml unchanged (manual only, unrelated to pipeline)

Closes AE-2779

* fix: address PR review feedback

- Pin UV_PYTHON per matrix entry so uv uses the correct interpreter
- Add always() to pypi-publish so force_publish works when
  release-please is skipped

Author: deanq