modernize cdm-ci workflows to avoid collisions

- previously it was possible for both the "real" and the "faux"
  workflows to execute because the rules to execute both were met and
  it was difficult/impossible to write the rules in a way where that
  didn't happen; when that occurred the "faux" workflow would pass
  which would render the result of the "real" workflow irrelevant; in
  that situation if the users were not paying special attention and
  being very careful it was possible for code that failed the "real"
  ci workflow to be merged which is highly undesirable

- the new approach uses a 3rd party action to allow for more flexible
  rule authoring to solve this problem and now the "real" and "faux"
  paths are truly mutually exclusive

Author: k-rister

.github/workflows/cdm-ci.yaml

@@ -1,43 +1,67 @@
 name: cdm-ci
 
-# Controls when the action will run.
 on:
-  # Triggers the workflow on pull request events but only for the master branch
-  # ignore pull requests that only change documentation/license files
   pull_request:
     branches: [ master ]
-    paths-ignore:
-      - LICENSE
-      - '**.md'
-      - '.github/rulesets/**'
-      - .github/workflows/run-crucible-tracking.yaml
-      - .github/workflows/faux-crucible-ci.yaml
-      - .github/workflows/faux-cdm-ci.yaml
-      - 'docs/**'
-
-  # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
 concurrency:
   group: ${{ github.ref }}/cdm-ci
   cancel-in-progress: true
 
 jobs:
-  # Job to test installation
-  cdm-ci:
-    # Job will run on github-hosted runner
-    runs-on: ubuntu-latest
+  changes:
+    runs-on: [ self-hosted, workflow-overhead ]
+    outputs:
+      real-ci: ${{ steps.filter.outputs.real-ci }}
+      faux-ci: ${{ steps.filter.outputs.faux-ci }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dorny/paths-filter@v3
+        id: filter
+        with:
+          filters: |
+            real-ci:
+              - '**'
+              - '!LICENSE'
+              - '!**.md
+              - '!.github/rulesets/**'
+              - '!.github/workflows/run-crucible-tracking.yaml'
+              - '!.github/workflows/crucible-ci.yaml'
+              - '!docs/**'
+            faux-ci:
+              - 'LICENSE'
+              - '**.md
+              - '.github/rulesets/**'
+              - '.github/workflows/run-crucible-tracking.yaml'
+              - '.github/workflows/crucible-ci.yaml'
+              - 'docs/**'
 
-    # Steps represent a sequence of tasks that will be executed as part of the job
+  real-cdm-ci:
+    runs-on: ubuntu-latest
+    needs: changes
+    if: ${{ needs.changes.outputs.real-ci == 'true' }}
     steps:
-      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v3
         with:
-          node-version: "20.7.0"
+          node-version: "22.22.0"
       - name: fail if javascript files are not formatted
         run: npx prettier **/*.js --check
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
 
+  faux-cdm-ci:
+    runs-on: [ self-hosted, workflow-overhead ]
+    needs: changes
+    if: ${{ needs.changes.outputs.faux-ci == 'true' && needs.changes.outputs.real-ci == 'false' }
+    steps:
+      - run: 'echo "faux-cdm-ci-complete"'
+
+  cmd-ci:
+    runs-on: [ self-hosted, workflow-overhead ]
+    needs: [ real-cdm-ci, faux-cdm-ci ]
+    if: always()
+    steps:
+      - run: 'echo "cdm-ci complete"'