feat(ci): add reusable quality gate for merge and release

[eduardbar]

Summary

• add reusable quality workflow that runs npm ci, tests, coverage, and build across Node 18/20/22
• enforce the reusable quality gate on pull_request and push to master
• require release verification in publish workflow before npm publish, and export trust JSON formatter to keep API usage aligned

Validation

• drift scan on current tree reports totalScore 0 and totalIssues 0 after the trust export adjustment
• existing release and PR checks remain green on master baseline

[github-actions]

drift trust

drift trust

• Trust Score: 100/100
• Merge Risk: LOW
• Target: /home/runner/work/drift/drift

Diff signals

• Base ref: origin/master
• Diff status: NEUTRAL
• Score delta: +0
• Issues: +0 new / -0 resolved
• Trust adjustment: +0 penalty / -0 bonus (net +0)

Top reasons

• none

Fix priorities

• none

drift review

drift review

ℹ️ No drift changes detected against base ref.

• Base ref: origin/master
• Score delta: +0
• New issues: 0
• Resolved issues: 0

File breakdown

• No file-level deltas detected