f646a900

Run NixCI checks for pull requests and default-branch pushes (#1)

## Summary

Run NixCI checks for pull requests and default-branch pushes. An aggregate flake check builds every exported package, and the build wrapper uploads its closure to the NixCI cache only after checks pass. The README includes CrowCI and NixCI status badges linking to this repository's build pages.

The sandboxed Go test and pre-commit checks reuse the application's Nix-built dependencies instead of attempting network downloads.

Ports pointer-brother commits `ea888c070e8e6abd341a1b6d6cc3ef0f1defdf57` and `324e4710e3efbb2ed4d98cbc57debd8c7773db78`.

## Validation

- `./dev-scripts/run-go-tests`
- `./dev-scripts/git-hooks/pre-commit`
- `nix flake check` on x86_64-linux
- Mocked script tests covering default/custom Nix options, upload after success, no upload after failure, and an absent optional upload hook

The hosted workflow and actual cache upload have not been exercised. Other supported platforms were not built.

Co-authored-by: Michael Lynch <git@mtlynch.io>
Reviewed-on: https://codefloe.com/mtlynch/aw-web-ng/pulls/1

Total

5s

Timeline