ci(pipeline): parallelize lint, typecheck, security, and quality jobs

The lint, typecheck, security, and quality static analysis jobs already
run in parallel (no needs dependencies between them). However, downstream
jobs only gated on a subset of these jobs, allowing the pipeline to
proceed even when some static analysis checks failed.

Updated needs dependencies for downstream jobs:
- coverage: [lint, typecheck] → [lint, typecheck, security, quality]
- benchmark-regression: [lint, typecheck] → [lint, typecheck, security, quality]
- docker: [lint, typecheck, unit_tests, security] → [lint, typecheck, security, quality, unit_tests]

All four static analysis jobs (lint, typecheck, security, quality) now
run in parallel and all downstream jobs correctly gate on the full set,
ensuring no job proceeds unless all static analysis checks pass.

ISSUES CLOSED: #1536

.forgejo/workflows/ci.yml

@@ -268,7 +268,7 @@ jobs:
         runs-on: docker
         container:
             image: python:3.13-slim
-        needs: [lint, typecheck]
+        needs: [lint, typecheck, security, quality]
         steps:
             - name: Install system dependencies (nodejs for checkout, git for merge tests)
               run: |
@@ -336,7 +336,7 @@ jobs:
         runs-on: docker-benchmark
         container:
             image: python:3.13-slim
-        needs: [lint, typecheck]
+        needs: [lint, typecheck, security, quality]
         steps:
             - name: Install system dependencies (nodejs for checkout, git for merge tests)
               run: |
@@ -467,7 +467,7 @@ jobs:
                   NOX_DEFAULT_VENV_BACKEND: uv
 
     docker:
-        needs: [lint, typecheck, unit_tests, security]
+        needs: [lint, typecheck, security, quality, unit_tests]
         runs-on: docker
         container:
             image: docker:dind