Harden workflow artifact selection

[wiegandm]

What

• Preserve the configured workflow status string so GitHub receives status=success rather than status=completed.
• Detect duplicate workflow-run IDs and non-successful runs in a success query.
• Retry invalid workflow-run responses and responses with no usable artifact before failing.

Why

GitHub API responses have intermittently omitted recent workflow runs and included duplicate old runs, causing downstream jobs to select expired artifacts or find no usable artifact.

References

DOS-836

Checklist

• Tests

Generated with the help of pi coding agent harness (model: openai-codex/gpt-5.6-terra).

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA eb3209c.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Files

None

[github-actions]

Conventional Commits Report

😢 No conventional commits found.

👉 Learn more about the conventional commits usage at Greenbone.