release: v0.15.0 — security hardening, tests, and CI

Harden ARIA policy enforcement (troubleshoot chaining, DB permission,
session blacklist merge), fix SSH keep-alive, require master password on
idle lock, add shared aiPolicy module with Vitest, and CI/release workflows.

Author: AnasProgrammer2

.github/workflows/ci.yml

@@ -0,0 +1,29 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Typecheck
+        run: npm run typecheck
+
+      - name: Test
+        run: npm run test

.github/workflows/release.yml

@@ -74,6 +74,9 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      - name: Typecheck & test
+        run: npm run typecheck && npm run test
+
       # ── macOS code signing ────────────────────────────────────────────────────
       # Requires repository secrets:
       #   APPLE_CERTIFICATE          — base64-encoded .p12 certificate