Adjust tox workflow for improved integration

This commit's changes are directly analogous to those in:
EliahKagan/subaudit@353cd50

- Remove `fail-fast: false` to let failing checks cancel others.

- Add a "collector" job that depends on all the jobs generated by
  the `tox` matrix job definition, so the individual jobs don't
  have to be added as required checks for branch protection.
  Instead, the name "All tox checks pass" has been added.

  This is based indirectly on the `test-pass` job in `gitoxide`,
  which was introduced in GitoxideLabs/gitoxide#1551 by
  https://github.com/NobodyXu. It is more specifically based on my
  adaptation of that in `algorithms-python` introduced in
  EliahKagan/algorithms-python#234.

  This is a common pattern, so it does not necessarily resemble
  the code in `gitoxide` more than it does that pattern elsewhere,
  and it is simpler than the version in `algorithms-python`. See:
  EliahKagan/algorithms-python@60d2d4e

Author: EliahKagan

.github/workflows/tox.yml

@@ -49,8 +49,6 @@ jobs:
         - python-version: '3.14'
           experimental: true
 
-      fail-fast: false
-
     runs-on: ${{ matrix.os }}
 
     defaults:
@@ -75,3 +73,18 @@ jobs:
 
     - name: Check with tox
       run: tox --root ${{ matrix.package }}
+
+  all-pass:
+    name: All tox checks pass
+
+    needs: [tox]
+
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Some failed
+      if: contains(needs.*.result, 'cancelled') || contains(needs.*.result, 'failure')
+      run: false
+
+    - name: All passed
+      run: true