ci(release): add checks and release automation

[LMLiam]

Summary

Run SwiftPM and native application checks on stacked pull requests. Keep every release version source aligned and use job-scoped workflow permissions. Cache SwiftPM and Xcode dependencies to reduce repeated work.

Issues

Closes #8

Behaviour and security

The workflows now run for pull requests against any base branch. Each job has only read access to repository contents, except for the existing release and CodeQL jobs that need their documented write permissions. Release-please updates the CLI and app versions from one release.

Verification

• shellcheck scripts/check.sh scripts/check-version-consistency.sh scripts/lib/version-consistency.sh Tests/Scripts/run-title-tests.sh Tests/Scripts/run-version-consistency-tests.sh
• actionlint
• bash scripts/check.sh
• xcodebuild -project Clamshell.xcodeproj -scheme ClamshellApp -configuration Debug -destination "platform=macOS" -derivedDataPath .build/ci/DerivedData CODE_SIGNING_ALLOWED=NO test
• xcodebuild -quiet -project Clamshell.xcodeproj -scheme ClamshellControl -configuration Debug -destination "platform=macOS" -derivedDataPath .build/ci/DerivedData CODE_SIGNING_ALLOWED=NO test

Screenshots

Not applicable.

Checklist

• scripts/check.sh passes.
• User and contributor documentation matches the change.
• Documentation uses ASD-STE100 Simplified Technical English.
• Every commit uses verb(area): description.
• Privileged behaviour is covered by safe tests rather than live system mutation.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: c3a63c46-110e-465f-8be9-780602b2cab5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[LMLiam]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.