GitHub Actions

Lint, typecheck, test and build on every push; a three-OS matrix producing installers; tag-triggered releases that draft the GitHub release; static-site deploys to Pages.