ci: add release + CI pipelines; ship platform binaries (v0.3.3)

The repo had no .github/workflows, so v0.3.1/v0.3.2 were tagged with zero
release assets — 'animus plugin install launchapp-dev/animus-queue-default@vX'
failed with 'no release asset matched platform' and the plugin could only be
path-installed from a local build. Port the working release pipeline from
animus-subject-default (build x86_64/aarch64 linux + darwin, cosign-sign,
publish via softprops/action-gh-release) plus the fmt/clippy/test CI. No
functional code change from v0.3.2.

Author: Shooksie

.github/workflows/ci.yml

@@ -0,0 +1,30 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+env:
+  CARGO_TERM_COLOR: always
+  RUST_BACKTRACE: 1
+
+jobs:
+  test:
+    name: Test (${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: rustfmt, clippy
+      - uses: Swatinem/rust-cache@v2
+      - run: cargo fmt --all -- --check
+      - run: cargo clippy --all-targets -- -D warnings
+      - run: cargo test --all-features
+      - run: cargo build --release

.github/workflows/release.yml

@@ -0,0 +1,74 @@
+name: release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write
+  id-token: write
+
+env:
+  # GitHub Actions runner Node 20 -> Node 24 deprecation (effective 2026-06-02).
+  # Forces JS-based actions onto Node 24 ahead of the cutover.
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+jobs:
+  build:
+    name: build ${{ matrix.target }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: ubuntu-latest
+            target: x86_64-unknown-linux-gnu
+            archive: tar.gz
+          - os: ubuntu-latest
+            target: aarch64-unknown-linux-gnu
+            archive: tar.gz
+            cross: true
+          - os: macos-latest
+            target: x86_64-apple-darwin
+            archive: tar.gz
+          - os: macos-latest
+            target: aarch64-apple-darwin
+            archive: tar.gz
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.target }}
+      - uses: Swatinem/rust-cache@v2
+      - name: install cross
+        if: matrix.cross
+        run: cargo install cross --git https://github.com/cross-rs/cross --locked
+      - name: build (cross)
+        if: matrix.cross
+        run: cross build --release --target ${{ matrix.target }}
+      - name: build (native)
+        if: '!matrix.cross'
+        run: cargo build --release --target ${{ matrix.target }}
+      - name: package
+        run: |
+          mkdir -p dist
+          BIN=animus-queue-default
+          ARCHIVE="${BIN}-${{ matrix.target }}.tar.gz"
+          tar -C target/${{ matrix.target }}/release -czf "dist/${ARCHIVE}" "${BIN}"
+          ( cd dist && shasum -a 256 "${ARCHIVE}" > "${ARCHIVE}.sha256" )
+      - name: Install cosign
+        uses: sigstore/cosign-installer@v3.7.0
+      - name: Sign archive with cosign (keyless)
+        run: |
+          set -euo pipefail
+          BIN=animus-queue-default
+          ARCHIVE="${BIN}-${{ matrix.target }}.tar.gz"
+          cd dist
+          cosign sign-blob \
+            --yes \
+            --bundle "${ARCHIVE}.bundle" \
+            "${ARCHIVE}"
+      - uses: softprops/action-gh-release@v2
+        with:
+          files: dist/*

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "animus-queue-default"
-version = "0.3.2"
+version = "0.3.3"
 edition = "2021"
 description = "Reference queue plugin for Animus v0.5 (lift-and-shift of in-tree dispatch queue + atomic queue/lease + queue/release_pending)"
 license = "MIT OR Apache-2.0"