ci: initial GitHub Action workflow

.github/workflows/actions.lock

@@ -0,0 +1,31 @@
+# This file is machine-generated by `gh actions-lock`.
+# Do not edit by hand; run `gh actions-lock` to update.
+# Docs: https://gh.io/actions-lockfile
+version: 'v0.0.2'
+workflows:
+    '.github/workflows/ci.yaml':
+        - 'actions/checkout@v7.0.1'
+        - 'actions/setup-node@v7.0.0'
+        - 'cobot/couchdb-action@v5.0.1'
+        - 'step-security/harden-runner@v2.20.1'
+dependencies:
+    'actions/checkout@v7.0.1':
+        ref: 'v7.0.1'
+        commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/setup-node@v7.0.0':
+        ref: 'v7.0.0'
+        commit: 'sha1-820762786026740c76f36085b0efc47a31fe5020'
+        owner_id: 44036562
+        repo_id: 189476904
+    'cobot/couchdb-action@v5.0.1':
+        ref: 'v5.0.1'
+        commit: 'sha1-716f8ccff36d9ee08e27f094d842ff8955f83c66'
+        owner_id: 758697
+        repo_id: 216527135
+    'step-security/harden-runner@v2.20.1':
+        ref: 'v2.20.1'
+        commit: 'sha1-b09bb98e06d4d774595224525879c09bc6e98c40'
+        owner_id: 88700172
+        repo_id: 422287306

.github/workflows/ci.yaml

@@ -0,0 +1,60 @@
+# This workflow is managed by gh actions-lock.
+
+on:
+  push:
+    branches:
+      - master
+  pull_request: {}
+
+name: CI
+
+permissions: {}
+
+jobs:
+  test:
+    name: Test
+    strategy:
+      matrix:
+        os: [ubuntu-latest]
+        node-version: [22, 24, 26]
+    runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+    steps:
+      - uses: step-security/harden-runner@v2.20.1
+        with:
+          disable-sudo: true
+          egress-policy: audit
+      - uses: actions/checkout@v7.0.1
+      - uses: actions/setup-node@v7.0.0
+        with:
+          node-version: ${{ matrix.node-version }}
+      - name: Bootstrap Dependencies
+        run: npm ci
+      - name: Setup CouchDB
+        uses: cobot/couchdb-action@v5.0.1
+      - name: Run Tests
+        env:
+          COUCHDB_URL: 'http://localhost'
+          COUCHDB_USERNAME: admin
+          COUCHDB_PASSWORD: admin
+        run: npm test
+
+  code-lint:
+    name: Code Lint
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: step-security/harden-runner@v2.20.1
+        with:
+          disable-sudo: true
+          egress-policy: audit
+      - uses: actions/checkout@v7.0.1
+      - uses: actions/setup-node@v7.0.0
+        with:
+          node-version: 24
+      - name: Bootstrap Dependencies
+        run: npm ci --ignore-scripts
+      - name: Check Code Lint
+        run: npm run lint

.gitignore

@@ -1,2 +1,5 @@
 node_modules
 .DS_Store
+*~
+.#*
+\#*