feat/ci: ensure static linkage of C deps

[drahnr]

Adds a CI step to check compiled binaries to be statically linked against libsqlite and librocksdb

[Mirko-von-Leipzig]

I think some comments for the next poor non-bash soul would be kind.

Suggested change

	metadata=$(cargo metadata --no-deps --format-version 1)
	mapfile -t bin_targets < <(
	echo "${metadata}" | jq -r '.packages[].targets[] | select(.kind[] == "bin") | .name' | sort -u
	)
	[[ ${#bin_targets[@]} -ne 0 ]] || { echo "No bin targets found."; exit 1; }
	for bin_target in "${bin_targets[@]}"; do
	binary_path="target/debug/${bin_target}"
	[[ -x "${binary_path}" ]] || { echo "Missing binary: ${binary_path}"; exit 1; }
	ldd_output="$(ldd "${binary_path}" 2>&1 || true)"
	[[ "${ldd_output}" != *"not a dynamic executable"* ]] || continue
	! echo "${ldd_output}" | grep -E -q 'librocksdb|libsqlite' || {
	echo "Dynamic linkage detected for ${bin_target}."
	echo "${ldd_output}"
	exit 1
	}
	done
	# Pull out the binary names from `cargo metadata`.
	metadata=$(cargo metadata --no-deps --format-version 1)
	bin_targets=$(
	echo "${metadata}" | jq -r '.packages[].targets[] | select(.kind[] == "bin") | .name' | sort -u'
	)
	# Sanity check, abort if no binaries found.
	[ -z ${bin_targets} ] || {
	echo "::error::No binaries targets found.";
	exit 1;
	}
	# Map to an array so we can iterate over entries.
	mapfile -t bin_targets < <$bin_targets
	# Inspect each binary's linker output for `rocksdb` and `sqlite`.
	# If they're present then we know they're dynamically linked and
	# are _not_ statically linked (bad).
	for bin_target in "${bin_targets[@]}"; do
	# Sanity check that the binary was built.
	binary_path="target/debug/${bin_target}"
	[[ -x "${binary_path}" ]] || {
	echo "::error::Missing binary: ${binary_path}";
	exit 1;
	}
	# I'm actually unsure why this is short-circuiting `|| true`
	ldd_output="$(ldd "${binary_path}" 2>&1 || true)"
	# Should this not be an unexpected abort? Or are there binaries
	# that we have like this?
	[[ "${ldd_output}" != *"not a dynamic executable"* ]] || continue
	# I also don't know this `! echo` syntax?
	! echo "${ldd_output}" | grep -E -q 'librocksdb|libsqlite' || {
	echo "Dynamic linkage detected for ${bin_target}."
	echo "${ldd_output}"
	exit 1
	}
	done

[drahnr]

! is inverting the bool exit coe of echo "foo" | grep ..

[drahnr]

Simplified to prefer if-cases over [[ .. ]] || .. pattern and avoiding brace-less inversions