ci: add GitHub Actions workflow (bootstrap for #158) (#161)

* ci: add GitHub Actions workflow (lint, Kotlin tests, build)

Bootstrap workflow with the jobs that pass on current master: lint,
Kotlin tests, and build. TypeScript and unit test jobs are added in
#158 alongside the fixes they need (tsconfig exclude, passWithNoTests).

Co-authored-by: Claude <claude@anthropic.com>

* ci: pin actions to SHAs, add explicit permissions

Address CodeRabbit feedback:
- Pin actions/checkout, actions/setup-node, actions/setup-java to
  full commit SHAs to reduce supply-chain risk
- Add workflow-level permissions: contents: read for least privilege

Co-authored-by: Claude <claude@anthropic.com>

* ci: update Node.js from 18 (EOL) to 22 LTS

Node 18 reached end-of-life. Node 20 reaches EOL in May 2026.
Use Node 22 LTS for longer support runway.

Co-authored-by: Claude <claude@anthropic.com>

---------

Co-authored-by: Claude <claude@anthropic.com>

Author: pavelzeman

.github/workflows/ci.yml

@@ -0,0 +1,54 @@
+name: CI
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: 22
+          cache: npm
+      - run: npm ci
+      - run: npm run lint
+
+  kotlin-tests:
+    name: Kotlin Tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
+        with:
+          distribution: temurin
+          java-version: 17
+          cache: gradle
+      - name: Run Kotlin unit tests
+        working-directory: test-runner
+        run: ./gradlew test
+
+  build:
+    name: Build Package
+    runs-on: ubuntu-latest
+    needs: [lint, kotlin-tests]
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: 22
+          cache: npm
+      - run: npm ci
+      - run: npm run prepare