Webhook-to-SSE gateway with hierarchical topic routing and signature verification

Add Spindle CI workflow

Runs tests with coverage on push/PR to main, using the free
spindle.tangled.sh instance. This mirrors what the pre-commit hooks
already enforce locally — just making sure it's gated in CI too.

Docker build + push to ATCR is a follow-up once we sort out the
auth model there.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

+19
+19
.tangled/workflows/ci.yml
··· 1 + when: 2 + - event: ["push"] 3 + branch: ["main"] 4 + - event: ["pull_request"] 5 + branch: ["main"] 6 + 7 + engine: "nixery" 8 + 9 + dependencies: 10 + nixpkgs: 11 + - go 12 + 13 + steps: 14 + - name: "Test with coverage" 15 + environment: 16 + CGO_ENABLED: "0" 17 + command: | 18 + go test -coverprofile=coverage.out -covermode=atomic ./... 19 + ./check-coverage