chore: setup CI scripts (#6)

* wip: workflows

* wip: fix up issues in ci scripts and fix frontend lint errors

* wip: fix backend lints

* remove unused deps

* wip: build frontend in test.yml

* wip: attempt to improve Rust caching

* wip: testing release

* wip: linear release flow

* wip: check against both package.json versions

* wip: spurious attempt to get Rust caching

* wip: more cache

* merge release and publish jobs; add more caching to release flow

* decouple github releases and npm publishing

* update pack flow

---------

Co-authored-by: couscous <couscous@runner.com>

.github/workflows/pre-release.yml

@@ -0,0 +1,136 @@
+# To pre-release:
+# ```
+# git tag -a v0.1.0 -m "Release 0.1.0"
+# git push origin v0.1.0
+# ```
+
+name: Create GitHub Pre-Release
+
+on:
+  push:
+    tags:
+      - "v*.*.*"
+      
+concurrency:
+  group: release
+  cancel-in-progress: true
+      
+permissions:
+  contents: write
+  packages: write
+  pull-requests: write
+
+env:
+  NODE_VERSION: 22
+  PNPM_VERSION: 10.8.1
+  TAG_REGEX: '^v[0-9]+\.[0-9]+\.[0-9]+$'
+
+jobs:
+  tag-check:
+    runs-on: ubuntu-latest
+    if: github.ref_type == 'tag'
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Validate tag matches package.json version
+        shell: bash
+        run: |
+          set -euo pipefail
+          echo "::group::Tag validation"
+
+          # 1. Must be a tag and match the regex
+          [[ "${GITHUB_REF_TYPE}" == "tag" ]] \
+            || { echo "❌  Not a tag push"; exit 1; }
+          [[ "${GITHUB_REF_NAME}" =~ ${TAG_REGEX} ]] \
+            || { echo "❌  Tag '${GITHUB_REF_NAME}' != ${TAG_REGEX}"; exit 1; }
+
+          # 2. Extract versions
+          tag_ver="${GITHUB_REF_NAME#v}"
+          package_ver="$(node -p "require('./package.json').version")"
+          cli_package_ver="$(node -p "require('./npx-cli/package.json').version")"
+
+          # 3. Compare
+          [[ "${tag_ver}" == "${package_ver}" ]] \
+            || { echo "❌  Tag ${tag_ver} ≠ package.json ${package_ver}"; exit 1; }
+            
+          # 4. Compare tag with npx-cli package.json
+          [[ "${tag_ver}" == "${cli_package_ver}" ]] \
+            || { echo "❌  Tag ${tag_ver} ≠ npx-cli package.json ${cli_package_ver}"; exit 1; }
+
+          echo "✅  Tag and package.json agree (${tag_ver})"
+          echo "::endgroup::"
+  
+  create-prerelease:
+    needs: tag-check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: ./.github/actions/setup-node
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Lint frontend
+        run: cd frontend && npm run lint
+
+      - name: Type check frontend
+        run: cd frontend && npx tsc --noEmit
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          toolchain: nightly-2025-05-18
+          components: rustfmt, clippy
+
+      - name: Build frontend
+        run: npm run frontend:build
+          
+      - name: Cache Rust dependencies
+        uses: Swatinem/rust-cache@v2
+        env:
+          RUST_CACHE_DEBUG: true
+        with:
+          workspaces: "backend"
+
+      - name: Checks
+        run: |
+          cargo fmt --all -- --check
+          cargo test --workspace
+          cargo clippy --all --all-targets --all-features -- -D warnings
+          
+      - name: Build backend
+        run: cargo build --release --manifest-path backend/Cargo.toml
+        
+      - name: Get version from tag
+        id: get-version
+        run: echo "version=${GITHUB_REF_NAME#v}" >> $GITHUB_OUTPUT
+
+      - name: Zip backend
+        run: |
+          mkdir vibe-kanban-${{ github.ref_name }}
+          mv target/release/vibe-kanban vibe-kanban-${{ github.ref_name }}
+          mv frontend/dist vibe-kanban-${{ github.ref_name }}
+          zip -r vibe-kanban-${{ github.ref_name }}.zip vibe-kanban-${{ github.ref_name }}
+          
+      - name: Code sign
+        run: echo "pass"
+      
+      - name: Pack
+        run: |
+          mkdir -p npx-cli/dist/linux-x64
+          mv vibe-kanban-${{ github.ref_name }}.zip npx-cli/dist/linux-x64
+          cd npx-cli
+          npm pack
+        
+      - name: Create GitHub Pre-Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ github.ref_name }}
+          name: Pre-release ${{ github.ref_name }}
+          prerelease: true
+          generate_release_notes: true
+          files: |
+            vibe-kanban-${{ github.ref_name }}.zip
+            npx-cli/vibe-kanban-*.tgz