build: add a new "lint" workflow that runs clang-tidy

.github/workflows/lint.yml

@@ -0,0 +1,28 @@
+name: Lint
+
+on: [push, pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  Lint:
+    runs-on: ubuntu-26.04
+    env:
+      BS: cmake
+      CRYPTO: openssl
+    steps:
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - name: Update apt cache
+      run: sudo apt-get update
+    - name: Install dependencies
+      run: sudo apt-get install -y autoconf automake build-essential cmake git libssl-dev nettle-dev libmbedtls-dev libacl1-dev libbz2-dev liblzma-dev liblz4-dev libzstd-dev lzop pkg-config zlib1g-dev libclang-22-dev libclang-cpp22-dev clang-22 ninja-build
+    - name: Configure
+      run: ./build/ci/build.sh -a configure
+      env:
+        CMAKE_ARGS: -GNinja -DENABLE_CLANG_TIDY=YES
+    - name: Build
+      run: ./build/ci/build.sh -a build
+      env:
+        MAKE: ninja
+        MAKE_ARGS: --