fix(ci): harden repository syntax audit and keep update CI source-only

.github/workflows/ci.yml

@@ -36,14 +36,22 @@ jobs:
         run: python -m pip install -r requirements.txt
       - name: Audit
         run: python scripts/test/audit.py
-      - name: Build wheel
-        run: |
-          python -m pip install --upgrade setuptools wheel
-          python -m pip wheel . --no-deps --no-build-isolation -w dist
-      - name: Audit wheel contents
-        run: python scripts/test/p14_wheel_audit.py dist/*.whl
+
+  windows-test:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+          architecture: 'x64'
+      - name: Install application dependencies
+        run: python -m pip install -r requirements.txt
+      - name: Full regression audit
+        run: python scripts/test/audit.py
 
   windows-build:
+    if: startsWith(github.ref, 'refs/tags/v')
     runs-on: windows-latest
     steps:
       - uses: actions/checkout@v4
@@ -265,7 +273,7 @@ jobs:
 
   release:
     if: startsWith(github.ref, 'refs/tags/v')
-    needs: [test, windows-build]
+    needs: [test, windows-test, windows-build]
     runs-on: ubuntu-latest
     permissions:
       contents: write