chore: fix all-passed gate to run with if: always()

The all-passed job depends on lint-commits which is always skipped
on push events (due to its if: github.event_name == 'pull_request'
conditional). GitHub Actions propagates skipped status to dependent
jobs, so all-passed was silently skipped on every run and never
actually gated anything.

Adding if: always() ensures the gate job runs regardless of skipped
dependencies, and the step now verifies that no jobs failed or were
cancelled instead of unconditionally reporting success.

Author: mridang

.github/workflows/pipeline.yml

@@ -50,6 +50,7 @@ jobs:
   all-passed:
     name: Check Build Status
     runs-on: ubuntu-latest
+    if: always()
     needs:
       - lint-commits
       - code-style
@@ -62,5 +63,9 @@ jobs:
         with:
           egress-policy: audit
 
-      - name: Report Success
-        run: echo "All required checks passed successfully."
+      - name: Verify all jobs passed
+        run: |
+          if [[ "${{ contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled') }}" == "true" ]]; then
+            echo "One or more jobs failed or were cancelled."
+            exit 1
+          fi