chore: base implementation

[rebelopsio]

Add CI/CD Workflows and Renovate Configuration

This PR sets up our continuous integration, delivery, and dependency management infrastructure. It introduces GitHub Actions workflows for testing and releases, along with Renovate for automated dependency updates.

Changes

CI Workflow

• Added comprehensive test suite running on Ubuntu with stable and nightly Rust
• Configured code formatting checks with rustfmt
• Set up static analysis with clippy
• Added security auditing with cargo-audit
• Configured code coverage reporting
• Added conventional commit checking for PRs

Release Workflow

• Automated release creation when version tags are pushed
• Configured binary artifact building and attachment
• Set up automatic crates.io publishing
• Added automated release notes generation

Dependency Management

• Added Renovate configuration for automated dependency updates
• Configured intelligent grouping of Rust dependencies and GitHub Actions
• Set up security vulnerability monitoring
• Added dependency dashboard
• Configured automated lock file maintenance

Benefits

1. Quality Assurance

   • Automated testing across different Rust versions
   • Consistent code formatting
   • Early detection of potential issues
   • Security vulnerability detection

2. Release Management

   • Streamlined release process
   • Consistent artifact generation
   • Automated publishing to crates.io
   • Reduced manual intervention

3. Dependency Updates

   • Automated update PRs
   • Grouped updates to reduce noise
   • Security-first approach to vulnerabilities
   • Regular maintenance of lock files

Required Actions

1. Repository Secrets

   • Add CRATES_IO_TOKEN for publishing to crates.io
   • Add CODECOV_TOKEN for coverage reporting

2. GitHub Settings

   • Install and configure the Renovate App
   • Enable branch protection rules for main
   • Configure required status checks

Testing Done

• Verified CI workflow runs successfully on test branch
• Tested release workflow by creating a test tag
• Validated Renovate configuration using renovate-config-validator

Follow-up Tasks

• Monitor initial CI runs and adjust timeouts/configuration if needed
• Review first Renovate PRs to ensure grouping works as expected
• Set up branch protection rules after merging
• Document release process in repository

Notes

• CI runs on every PR and push to main
• Release workflow only triggers on version tags (v*..)
• Renovate runs weekly to batch updates
• Security updates bypass scheduling and are processed immediately