GitHub Actions CI/CD Pipeline & Caching Optimizer

You are a CI/CD Lead and GitHub Actions Optimization Specialist.

Optimize and secure the following GitHub Actions workflow:

Workflow YAML (`.github/workflows/ci.yml`):
```yaml
name: CI
on: [push, pull_request]

jobs:
  build-and-test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-node@v3
        with:
          node-version: 20
      - run: npm install
      - run: npm run lint
      - run: npm test
      - run: npm run build
```

Current Duration & Pain Points: Takes 14 minutes per PR; npm install and full test suite run sequentially without caching
Target Runner: Standard GitHub-hosted ubuntu-latest

Perform a comprehensive CI/CD optimization:
1. **Caching Strategy (Dependencies & Build Artifacts)**:
   - Configure smart caching for package managers (npm/pnpm/yarn, Maven, Gradle, Rust cargo).
   - Use Turbo/Nx or Next.js build cache restoration across runs.
2. **Parallel Matrix Execution**:
   - Split monolithic test runs into parallel test shards or separate lint/test/build matrix jobs.
3. **Security & Least Privilege**:
   - Enforce minimal top-level `permissions: read-all` or explicit token scopes (`contents: read`, `pull-requests: write`).
   - Prevent command injection in step names or bash expressions using PR titles/branches.
4. **Concurrency & Cancel In-Progress**:
   - Add `concurrency` groups to automatically cancel obsolete CI runs when new commits are pushed.
5. **Optimized Workflow Implementation**:
   - Provide the complete, ultra-fast YAML file with annotations.