Add continuous integration for Rust and TypeScript checks

[jxsonyx]

There is no checked-in CI workflow to enforce formatting, linting, contract tests, and SDK compilation.

Acceptance criteria:

• Run cargo fmt, clippy, and all wired Rust tests.
• Run npm ci and the SDK build/typecheck.
• Cache dependencies without caching secrets or generated deployment data.