[Tobias-Fischer]

Small fixes for four of the audit issues.

#25: a full rebuild keeps its progress across retries

• ci_config.py used to wipe the restored PR cache on every attempt while full_rebuild: true, so a full rebuild longer than one runner's time limit could never finish.
• Now it records the applied controls (full_rebuild, evict_cache) in a marker inside the cache, which is saved with the packages, and applies them only once per configuration.
• Tested with a fake cache:
  1. the first attempt starts clean;
  2. a retry keeps what it built;
  3. changed controls are applied once;
  4. a retry after an eviction keeps the rebuilt package.

#26: one build run per distribution and platform

• The generated build.yaml gets concurrency: group: build-<distro>-<platform>, so an older run can't upload alongside a newer one, and a newer pending run replaces older pending ones.
• It uses cancel-in-progress: false. Otherwise, re-running a failed job of an older run would cancel the newer run.

#33: new-distro is retryable

• It checks --from before creating anything.
• If creating the distribution fails, it removes only the directory this command created.
• Tested with a simulated generator failure: nothing is left behind.

#35: rs <d> build / build-one without recipes

• Instead of rattler-build's './recipes' needs to exist, it prints "run pixi run rs <d> generate-recipes first".
• The CI path (build-ci) always generates recipes first, so it's unchanged.

rs check passes, and the regenerated jazzy workflow lints clean.

Fixes #25, fixes #26, fixes #33, fixes #35.

🤖 Generated with Claude Code