CI on the shared test and security workflows (WS-Q task 1, OpenVibe.Shared 66b76f8): install, node --check, tests, contract and pin-drift checks from one definition; this repository's own steps kept as inputs and extra steps

ddiff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
iindex 0de69af..5300f33 100644
---- a/.github/workflows/ci.yml
++++ b/.github/workflows/ci.yml
@@@ -4,21 +4,28 @@ on:
      branches: [main]
    pull_request:
  jobs:
++  # install, node --check, tests, contract and pin-drift checks: the shared test job (WS-Q task 1).
    test:
++    uses: OpenVibers/OpenVibe.Shared/.github/workflows/test.yml@66b76f868ea8228aad7811309eafef3726b036f3
++    with:
++      install: 'true'                 # no dependencies
++      cache: false                    # and so no lockfile
++      syntax-dirs: scripts
++      pin-drift: false                # no openvibe-* pins
++  # The coupon helper's zip, kept 14 days for review.
++  package:
      runs-on: ubuntu-latest
      steps:
        - uses: actions/checkout@v4
        - uses: actions/setup-node@v4
          with:
            node-version: 22.22.1
--      # No dependencies: the tests and the packer use Node's standard library only.
--      - run: npm test
        - run: npm run pack
        - uses: actions/upload-artifact@v4
          with:
            name: openvibe-coupons-helper
            path: dist/*.zip
            retention-days: 14
--  # Secret scan (gitleaks) and dependency audit, shared by every OpenVibers repo (Track Q).
++  # Secret scan (gitleaks) and dependency audit, shared by every OpenVibers repo.
    security:
--    uses: OpenVibers/OpenVibe.Shared/.github/workflows/security.yml@83c998b65424fb97e6f6de55ad9cc5981767e89c
++    uses: OpenVibers/OpenVibe.Shared/.github/workflows/security.yml@66b76f868ea8228aad7811309eafef3726b036f3