ci: add ci/cd pipeline and dockerfile (story 1.2)

[vieiralucas]

Summary

• CI workflow with 4 parallel jobs (fmt, clippy, test, bench) triggered on PRs and pushes to main
• Release workflow triggered on version tags with 4-target cross-platform build matrix
• Multi-stage Dockerfile for container image published to ghcr.io
• GitHub Release creation with binaries and SHA256 checksums

Test plan

• CI workflow runs successfully on this PR
• All 4 CI jobs (fmt, clippy, test, bench) pass
• Release workflow syntax validates (will be tested on first tag push)
• Dockerfile builds locally with docker build .

---

Summary by cubic

Adds a complete CI/CD pipeline with actions pinned to commit SHAs: CI runs fmt, clippy, tests, and benches on every pull request and on main; tagged releases build cross-platform binaries and publish a Docker image to GHCR. Satisfies Story 1.2 requirements for automated quality checks and release packaging.

• New Features
  • CI on all PRs and main: fmt, clippy (-D warnings), nextest tests (placeholder test in fila-core), bench (non-blocking), installs protoc.
  • Release on v* tags: runs checks, builds fila and fila-server for linux amd64/arm64 and macOS amd64/arm64 (cross for linux arm64).
  • Packaging: GitHub Release with tarballs, LICENSE, and SHA256 checksums; Docker multi-stage image pushed to ghcr.io with semver tags; exposes 5555 with fila-server as entrypoint.

^{Written for commit 490ef1c. Summary will update on new commits.}

[cubic-dev-ai]

1 issue found across 5 files

Prompt for AI agents (all issues)

Check if these issues are valid — if so, understand the root cause of each and fix them.


<file name=".github/workflows/ci.yml">

<violation number="1" location=".github/workflows/ci.yml:17">
P2: Pin GitHub Actions to immutable commit SHAs instead of mutable tags to prevent unexpected or malicious updates in CI.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}