Please address the comments from this code review:

## Overall Comments
- Instead of disabling the Go modules cache entirely, consider using `cache-dependency-path: stackrox/go.sum` with `actions/setup-go` so you still benefit from caching while accommodating the `stackrox/` subdirectory layout.

Please address the comments from this code review:

## Overall Comments
- The `until docker exec ...` loop in the `Pre-load multi-arch images into Kind` step can run indefinitely on persistent failures; consider adding a maximum number of retries or an overall timeout to avoid hanging the workflow.
- The pre-load step hardcodes `--platform linux/amd64`; if this workflow might ever run on non-amd64 runners, consider deriving the platform from the runner or a matrix variable to keep it portable.

## Individual Comments

### Comment 1
<location> `.github/workflows/emailsender-central-compatibility.yaml:22-24` </location>
<code_context>
       - 'central/auth/m2m/**'
       - '.github/workflows/emailsender-central-compatibility.yaml'

+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
 jobs:
</code_context>

<issue_to_address>
**suggestion (bug_risk):** Concurrency group should likely include the ref to avoid cross-branch cancellations

`group: ${{ github.workflow }}` will cancel in-progress runs for this workflow across all branches. If you only want to cancel previous runs for the same branch/PR (like the old `cancel-previous-runs` action), scope the group with the ref, e.g. `group: ${{ github.workflow }}-${{ github.ref }}` or `group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}` so cancellations stay per-branch instead of global.

```suggestion
concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
  cancel-in-progress: true
```
</issue_to_address>

### Comment 2
<location> `.github/workflows/emailsender-central-compatibility.yaml:77-79` </location>
<code_context>
+          # See https://github.com/kubernetes-sigs/kind/issues/3795
+          # Same approach as #19016 for sensor integration tests.
+          TAG=$(make --no-print-directory -C stackrox tag)
+          for img in quay.io/rhacs-eng/main:$TAG quay.io/rhacs-eng/central-db:$TAG; do
+            echo "Waiting for $img ..."
+            until docker exec kind-control-plane ctr -n k8s.io images pull \
+              --user "${{ secrets.QUAY_RHACS_ENG_RO_USERNAME }}:${{ secrets.QUAY_RHACS_ENG_RO_PASSWORD }}" \
+              --platform linux/amd64 \
</code_context>

<issue_to_address>
**issue (bug_risk):** Add a maximum retry or timeout around the image pull loop to avoid hanging the job indefinitely

This `until ...; do sleep 30; done` construct will loop indefinitely if the image never becomes available (e.g., bad tag or credentials), effectively hanging the workflow until the global job timeout. Please bound this with either a max retry counter or a time-based cutoff (for example, tracking a `retries` variable and exiting with non-zero once it exceeds a threshold) so failures surface earlier and more predictably.
</issue_to_address>

Please address the comments from this code review:

## Individual Comments

### Comment 1
<location> `.github/workflows/emailsender-central-compatibility.yaml:22-24` </location>
<code_context>
       - 'central/auth/m2m/**'
       - '.github/workflows/emailsender-central-compatibility.yaml'

+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
 jobs:
</code_context>

<issue_to_address>
**suggestion (bug_risk):** Concurrency group keyed only by workflow name may cause runs from different branches/PRs to cancel each other.

Using only `${{ github.workflow }}` here means all runs of this workflow across all branches/PRs share one concurrency group. With `cancel-in-progress: true`, a run on one branch/PR can cancel a run on another, which can disrupt parallel PR validation. Consider including branch/ref in the group, e.g. `${{ github.workflow }}-${{ github.ref }}` or `${{ github.workflow }}-${{ github.head_ref || github.ref }}` so only runs for the same branch/PR cancel each other.

```suggestion
concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
  cancel-in-progress: true
```
</issue_to_address>