Fix concurrency key so ciflow tag re-pushes cancel prior runs (#21622)

Tag-triggered workflows key concurrency on `${{
github.event.pull_request.number || github.sha }}`. On a `ciflow/*` tag
push there is no PR number, so the group falls back to `github.sha` —
each re-push points at a new sha, gets its own group, and never cancels
the prior run. `cancel-in-progress` is dead for tag pushes.

On Aug 5 a burst of ciflow re-pushes fanned out to 46 shas / 117 runs,
buried the shared `macos-m1-stable` fleet, and drove `main` macOS
coverage to 0
([gha-infra#1391](meta-pytorch/pytorch-gha-infra#1391)).

## Fix

Fall back to `github.ref_name` (stable across re-pushes of the same tag)
and gate the sha term on `github.ref_type == 'branch'`, matching
`periodic.yml` in this repo and `pytorch/pytorch`'s `trunk.yml`:

```yaml
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref_name }}-${{ github.ref_type == 'branch' && github.sha }}-...
```

Applied to all 29 workflows carrying the old key (22 are tag-exposed;
the other 7 are fixed for uniformity). Also drops a stray `--` in the
nightly/test-backend group strings. `doc-build.yml` was already correct
(keys on `github.ref`) and is untouched.

## Also: apple.yml test-infra-ref

`apple.yml` passed `test-infra-ref: ''` to the `mobile_job` call,
forcing `actions/checkout` to resolve the default branch via a REST call
— a contributor to GitHub App installation rate-limit exhaustion
([gha-infra#1375](meta-pytorch/pytorch-gha-infra#1375)).
Set it to `main` (the branch the empty ref already resolved to). This is
the one executorch call site that overrode the new `main` default from
[pytorch/test-infra#8472](pytorch/test-infra#8472);
every other call site inherits that default.

## Review

`periodic.yml` (unchanged) is the template — verify `trunk.yml` matches
it; the other 28 are the identical one-line change. The `apple.yml` line
is independent.

---
Authored with assistance from Claude Code.

Author: huydhn

.github/workflows/apple.yml

@@ -25,7 +25,7 @@ on:
     - cron: '0 10 * * *'  # Runs daily at 2 AM PST
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}-${{ github.event_name == 'workflow_dispatch' }}-${{ github.event_name == 'schedule' }}
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref_name }}-${{ github.ref_type == 'branch' && github.sha }}-${{ github.event_name == 'workflow_dispatch' }}-${{ github.event_name == 'schedule' }}
   cancel-in-progress: true
 
 jobs:
@@ -161,7 +161,7 @@ jobs:
       device-type: ios
       # For iOS testing, the runner just needs to call AWS Device Farm, so there is no need to run this on macOS
       runner: linux.2xlarge
-      test-infra-ref: ''
+      test-infra-ref: main
       # This is the ARN of ExecuTorch project on AWS
       project-arn: arn:aws:devicefarm:us-west-2:308535385114:project:02a2cf0f-6d9b-45ee-ba1a-a086587469e6
       # This is the custom device pool that only includes iOS devices

.github/workflows/build-cadence-runner.yml

@@ -15,7 +15,7 @@ on:
   workflow_dispatch:
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.pull_request.number || github.sha }}
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.pull_request.number || github.ref_name }}-${{ github.ref_type == 'branch' && github.sha }}
   cancel-in-progress: true
 
 jobs:

.github/workflows/build-cmsis-pack.yml

@@ -42,7 +42,7 @@ on:
         type: string
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}-${{ github.event_name == 'workflow_dispatch' }}
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref_name }}-${{ github.ref_type == 'branch' && github.sha }}-${{ github.event_name == 'workflow_dispatch' }}
   cancel-in-progress: true
 
 jobs:

.github/workflows/build-presets.yml

@@ -9,7 +9,7 @@ on:
   workflow_dispatch:
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}-${{ github.event_name == 'workflow_dispatch' }}-${{ github.event_name == 'schedule' }}
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref_name }}-${{ github.ref_type == 'branch' && github.sha }}-${{ github.event_name == 'workflow_dispatch' }}-${{ github.event_name == 'schedule' }}
   cancel-in-progress: true
 
 jobs:

.github/workflows/check-c10-sync.yml

@@ -8,7 +8,7 @@ on:
       - runtime/core/portable_type/c10/**
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}-${{ github.event_name == 'workflow_dispatch' }}-${{ github.event_name == 'schedule' }}
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref_name }}-${{ github.ref_type == 'branch' && github.sha }}-${{ github.event_name == 'workflow_dispatch' }}-${{ github.event_name == 'schedule' }}
   cancel-in-progress: true
 
 jobs:

.github/workflows/check-labels.yml

@@ -25,7 +25,7 @@ on:
         required: true
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}-${{ github.event_name == 'workflow_dispatch' }}
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref_name }}-${{ github.ref_type == 'branch' && github.sha }}-${{ github.event_name == 'workflow_dispatch' }}
   cancel-in-progress: true
 
 jobs:

.github/workflows/cuda-perf.yml

@@ -31,7 +31,7 @@ on:
         default: "50"
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}-${{ github.event_name == 'workflow_dispatch' }}
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref_name }}-${{ github.ref_type == 'branch' && github.sha }}-${{ github.event_name == 'workflow_dispatch' }}
   cancel-in-progress: true
 
 permissions:

.github/workflows/cuda-windows.yml

@@ -20,7 +20,7 @@ on:
   workflow_dispatch:
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}-${{ github.event_name == 'workflow_dispatch' }}-${{ github.event_name == 'schedule' }}
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref_name }}-${{ github.ref_type == 'branch' && github.sha }}-${{ github.event_name == 'workflow_dispatch' }}-${{ github.event_name == 'schedule' }}
   cancel-in-progress: false
 
 permissions:

.github/workflows/cuda.yml

@@ -28,7 +28,7 @@ on:
   workflow_dispatch:
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}-${{ github.event_name == 'workflow_dispatch' }}-${{ github.event_name == 'schedule' }}
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref_name }}-${{ github.ref_type == 'branch' && github.sha }}-${{ github.event_name == 'workflow_dispatch' }}-${{ github.event_name == 'schedule' }}
   cancel-in-progress: false
 
 permissions:

.github/workflows/docker-builds.yml

@@ -19,7 +19,7 @@ on:
     - cron: 1 3 * * 3
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}-${{ github.event_name == 'workflow_dispatch' }}
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref_name }}-${{ github.ref_type == 'branch' && github.sha }}-${{ github.event_name == 'workflow_dispatch' }}
   cancel-in-progress: true
 
 env: