fix: Use an additional results step to ensure dynamic matrix jobs can… (

#3288)

… be used

<!--

Unless this is a very simple 1-line-of-code change, please create a new
issue describing the change you're proposing first, then link to it from
this PR.

Read more about our process in our contributing guide:
https://github.com/hashicorp/terraform-cdk/blob/main/CONTRIBUTING.md

-->

### Description

Branch protections, RuleSets and so on within Github don't seem to work
that well with dynamic (matrix based) jobs, so following the suggestions
of https://github.com/orgs/community/discussions/26822 to see if we can
use them.

.github/workflows/examples-pr.yml

@@ -19,3 +19,15 @@ jobs:
     with:
       concurrency_group_prefix: pr
     secrets: inherit
+  results:
+    if: ${{ always() }}
+    runs-on: ubuntu-latest
+    name: Result
+    needs: [examples]
+    steps:
+      - run: exit 1
+        if: >-
+          ${{
+               contains(needs.*.result, 'failure')
+            || contains(needs.*.result, 'cancelled')
+          }}

.github/workflows/pr-integration.yml

@@ -19,3 +19,15 @@ jobs:
     with:
       concurrency_group_prefix: pr
     secrets: inherit
+  results:
+    if: ${{ always() }}
+    runs-on: ubuntu-latest
+    name: Result
+    needs: [integration_test]
+    steps:
+      - run: exit 1
+        if: >-
+          ${{
+               contains(needs.*.result, 'failure')
+            || contains(needs.*.result, 'cancelled')
+          }}

.github/workflows/pr-provider-integration.yml

@@ -19,3 +19,15 @@ jobs:
     with:
       concurrency_group_prefix: pr
     secrets: inherit
+  results:
+    if: ${{ always() }}
+    runs-on: ubuntu-latest
+    name: Result
+    needs: [provider_integration_test]
+    steps:
+      - run: exit 1
+        if: >-
+          ${{
+               contains(needs.*.result, 'failure')
+            || contains(needs.*.result, 'cancelled')
+          }}

.github/workflows/pr-unit.yml

@@ -134,3 +134,16 @@ jobs:
       package: "cdktf"
       terraform_version: ${{ matrix.terraform_version }}
     secrets: inherit
+
+  results:
+    if: ${{ always() }}
+    runs-on: ubuntu-latest
+    name: Result
+    needs: [all_unit_tests]
+    steps:
+      - run: exit 1
+        if: >-
+          ${{
+               contains(needs.*.result, 'failure')
+            || contains(needs.*.result, 'cancelled')
+          }}