refactor(ci3): refactor common yaml into .github/ci3.sh

[ludamad]

Refactors ci3.yml to extract shared CI logic into a github/ci3.sh that can be securely called by both ci3.yml and ci3-external.yml. This separation of concerns improves maintainability and reduces duplication.