feat: bootstrap foundation application

.github/workflows/ci.yml

@@ -0,0 +1,48 @@
+name: ci
+
+on:
+  push:
+    branches:
+      - master
+      - "codex/**"
+  pull_request:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "1.24.2"
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+          cache: "npm"
+          cache-dependency-path: apps/web/package-lock.json
+
+      - name: Install build tooling
+        run: sudo apt-get update && sudo apt-get install -y build-essential
+
+      - name: Install web dependencies
+        run: cd apps/web && npm install
+
+      - name: Build web
+        run: cd apps/web && npm run build
+
+      - name: Run Go tests
+        run: cd apps/server && CGO_ENABLED=1 go test ./...
+
+      - name: Build server
+        run: cd apps/server && CGO_ENABLED=1 go build -trimpath ./cmd/md-hub-secure
+
+      - name: Run govulncheck
+        run: |
+          go install golang.org/x/vuln/cmd/govulncheck@latest
+          cd apps/server && govulncheck ./...
+
+      - name: Build container
+        run: docker build .
+