Move CI onto the shared ci-shared.yml pipeline

Replace this repository's copy of dotnet.yml with the small ci.yml caller from
ktsu-dev/.github/docs/shared-ci.md, which dispatches to the shared .NET
pipeline at @Release. The jobs are the same ones the local copy ran; only
where they are defined changes.

The Dependabot gate moves in the same commit because it names the workflow
it waits on. Left on ".NET Workflow", it would wait for a workflow that no
longer exists and auto-merge would stop without saying so. It now waits on
"CI" and calls the shared gate at @Release, as Sorting has since the canary.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RTMFFSY8FY5CpAhf6ikNH1

Author: claude

.github/workflows/ci.yml

@@ -0,0 +1,43 @@
+name: CI
+
+on:
+  push:
+    branches: [main, develop]
+    paths-ignore:
+      ["**.md", ".github/ISSUE_TEMPLATE/**", ".github/pull_request_template.md"]
+  pull_request:
+  schedule:
+    - cron: "0 23 * * *" # Daily at 11 PM UTC
+  workflow_dispatch:
+    inputs:
+      version-bump:
+        description: 'Version bump type'
+        required: false
+        default: 'auto'
+        type: choice
+        options:
+          - auto
+          - patch
+          - minor
+          - major
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+# The caller grants; a called workflow can only reduce. This is the union of what the
+# pipelines request -- dotnet.yml's release job needs contents and packages, its security
+# job needs id-token -- and a pipeline that needs a permission missing here fails the run
+# at startup, before any job exists to report it.
+permissions:
+  contents: write
+  packages: write
+  id-token: write
+
+jobs:
+  ci:
+    uses: ktsu-dev/.github/.github/workflows/ci-shared.yml@release
+    secrets: inherit
+    with:
+      # `inputs` is empty on push, pull_request and schedule; only a dispatch sets it.
+      version-bump: ${{ inputs.version-bump || 'auto' }}

.github/workflows/dependabot-merge.yml

@@ -15,7 +15,7 @@ name: Dependabot auto-merge
 on:
   workflow_run:
     workflows:
-      - ".NET Workflow"
+      - "CI"
     types: [completed]
 
 permissions:
@@ -28,6 +28,6 @@ jobs:
     if: >
       github.event.workflow_run.event == 'pull_request' &&
       github.event.workflow_run.conclusion == 'success'
-    uses: ktsu-dev/.github/.github/workflows/dependabot-merge.yml@main
+    uses: ktsu-dev/.github/.github/workflows/dependabot-merge.yml@release
     with:
       head-sha: ${{ github.event.workflow_run.head_sha }}