CI/CD for basic Rust hygiene

[buddhisthead]

Setup a CI/CD pipeline to gate PRs on:

• clippy
• fmt
• no warnings
• audit stuff

[michalrus]

This could be run on https://ci.iog.io – these checks (and more) are already in this PR:

• Add a Nix flake with a devshell, and package builds #266