ci: CCID and fork-friendly workflow updates (split from #937)

Summary

• Extract all .github/workflows/ changes from #937 into a standalone PR for separate review.
• Adds ccid-ci.yml / ccid-hil.yml, and the fork-friendly edits to build.yml, rustfmt_check.yml, and pddb-renode-ci.yml (upstream tag fetch, GITHUB_TOKEN for toolkit installs, feature-branch triggers).

Context

Reviewer requested that CI subsystem changes not be combined with the CCID firmware PR (#937).

Test plan

• Confirm workflows are syntactically valid on GitHub Actions
• On a feature-branch push/PR, Build + CCID CI jobs are triggered as expected
• install-toolkit succeeds with GITHUB_TOKEN mapped (no anonymous releases API 403)

Made with Cursor