[Htkym]

Summary

• Add manual dispatch to the existing all-push/PR Windows verification workflow.
• Preserve npm ci, type checking, packaging and VSIX-content verification.
• Add branch-scoped concurrency, disable persisted checkout credentials, and retain the existing VSIX artifact for 7 days.
• No Marketplace/Open VSX/GitHub Release workflow changes or publication.

Validation

• Static YAML and existing-command equality checks passed; GitHub source/diff reviewed.
• Exact head d27556e49b4680f407757db919e1c755281b1690 push CI passed: https://github.com/Htkym/workflowVisualEditor/actions/runs/41166728193
• Windows verify job, npm check/package and verify-vsix.ps1 all passed.
• Existing VSIX artifact was uploaded: 750,681 bytes, expires 2026-11-07 (7 days).
• New manual-dispatch entry itself has not been executed. Extension UI behavior was not newly tested.

Existing observation

npm ci reported 5 dependency vulnerabilities (3 moderate, 2 high). Dependencies were unchanged in this CI-only patch; the audit finding has not been diagnosed or claimed fixed.

Draft for review. No merge or publication performed.