ci: fail on sqlc gen drift

sqlc is unavailable in the dev env, so an edit to queries/*.sql or a
schema-affecting migration can silently diverge from the committed
gen/*.sql.go with nothing detecting it. New job regenerates with a pinned sqlc
and fails on any diff under internal/adapter/postgres/gen. Verified the current
tree is already in sync (regeneration produced no changes).

Author: Fr1ngg

.github/workflows/ci.yml

@@ -29,6 +29,25 @@ jobs:
       - name: Run pipeline (lint + test + build)
         run: dagger run go run ./ci/
 
+  sqlc:
+    name: sqlc gen up-to-date
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-go@v6
+        with:
+          go-version: ${{ env.GO_VERSION }}
+
+      # sqlc is unavailable in the dev env, so hand-edits to queries/*.sql or a
+      # schema-affecting migration can silently diverge from the committed
+      # gen/*.sql.go. Regenerate and fail if the tree changed.
+      - name: Regenerate and check for drift
+        run: |
+          go run github.com/sqlc-dev/sqlc/cmd/sqlc@v1.27.0 generate
+          git diff --exit-code internal/adapter/postgres/gen || {
+            echo "::error::sqlc generated code is out of date — run 'make gen' and commit internal/adapter/postgres/gen"; exit 1; }
+
   integration:
     name: Integration (real Postgres + RLS + migrations)
     runs-on: ubuntu-latest