feat: bundle shim node_modules for GitHub Actions runtime

feat: security hardening and test coverage to 90%

fix: edge cases — GitOID panic, outfile double extension, add tests

fix: construct proper DSSE envelope in insecure mode, add act tests

feat: implement cilock-action Go binary and GitHub Action

Initial commit