ci: standardize workflow and action display names

.github/workflows/ci.yml

@@ -21,14 +21,17 @@ concurrency:
 
 jobs:
   ci:
+    name: "Test"
     runs-on: blacksmith-4vcpu-ubuntu-2404
     # Bounded, so a step that hangs fails here rather than sitting until the
     # runner's own timeout hours later.
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: "Check out source"
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1
+      - name: "Set up tools"
+        uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1
       - name: Install pinned build and validation tools
         run: make install
 

.github/workflows/dependabot.yml

@@ -1,4 +1,4 @@
-name: Dependabot
+name: "Dependency Policy"
 
 # Dependabot's minor and patch action updates are grouped in dependabot.yml.
 # Once the required CI check passes, this marks only those low-risk updates for
@@ -12,11 +12,12 @@ permissions:
 
 jobs:
   auto-merge:
+    name: "Apply dependency policy"
     if: github.event.pull_request.user.login == 'dependabot[bot]'
     runs-on: blacksmith-2vcpu-ubuntu-2404
     timeout-minutes: 10
     steps:
-      - name: Read Dependabot metadata
+      - name: "Read dependency metadata"
         id: metadata
         uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0
         with:

.github/workflows/release-sdk.yml

@@ -1,4 +1,4 @@
-name: Release SDK
+name: "SDK Release"
 
 # Cut an SDK release: bump the sdk/v* tag and publish a tag-only GitHub
 # release. No artifacts — the SDK is a Go module, and the tag IS the release;
@@ -27,14 +27,16 @@ concurrency: release-sdk-${{ github.repository }}
 
 jobs:
   release:
+    name: "Release SDK"
     runs-on: blacksmith-4vcpu-ubuntu-2404
     # Bounded, so a step that hangs fails here rather than sitting until the
     # runner's own timeout hours later.
     timeout-minutes: 20
     permissions:
       contents: write # create the tag and the release
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: "Check out source"
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
 
@@ -70,7 +72,8 @@ jobs:
           fi
           echo "tag=$tag" >> "$GITHUB_OUTPUT"
 
-      - uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1
+      - name: "Set up tools"
+        uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1
       - name: Install pinned build and validation tools
         run: make install
 

.github/workflows/release.yml

@@ -30,6 +30,7 @@ concurrency: release-${{ github.repository }}
 
 jobs:
   release:
+    name: "Release"
     runs-on: blacksmith-4vcpu-ubuntu-2404
     # Bounded, so a step that hangs fails here rather than sitting until the
     # runner's own timeout hours later.
@@ -39,7 +40,8 @@ jobs:
       id-token: write # OIDC identity for build provenance
       attestations: write # record the provenance attestation
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: "Check out source"
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
 
@@ -75,7 +77,8 @@ jobs:
           echo "version=$version" >> "$GITHUB_OUTPUT"
           echo "tag=$tag" >> "$GITHUB_OUTPUT"
 
-      - uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1
+      - name: "Set up tools"
+        uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1
       - name: Install pinned build and validation tools
         run: make install