Add initial GitHub action workflows

Author: WebbinRoot

.github/workflows/build-and-release.yml

@@ -0,0 +1,76 @@
+name: Build Release Artifacts
+
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Release tag (e.g., v0.5.0)"
+        required: true
+        type: string
+      prerelease:
+        description: "Mark GitHub release as prerelease"
+        required: false
+        default: "false"
+        type: choice
+        options:
+          - "false"
+          - "true"
+      release_notes:
+        description: "Optional markdown notes (e.g., '- Added ...')"
+        required: false
+        default: ""
+        type: string
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    if: github.event_name == 'workflow_dispatch' && github.repository == 'NetSPI/OCISigner'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 1
+
+      - name: Set up JDK 25
+        uses: actions/setup-java@v5
+        with:
+          distribution: temurin
+          java-version: "25"
+          cache: maven
+
+      - name: Build
+        run: mvn -B -Dmaven.test.skip=true clean package
+
+      - name: Locate shaded jar
+        id: artifact
+        run: |
+          jar=$(ls target/*-all.jar | head -n 1)
+          echo "jar=$jar" >> "$GITHUB_OUTPUT"
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v6
+        with:
+          name: OCISigner-jar
+          path: ${{ steps.artifact.outputs.jar }}
+
+  release:
+    if: github.event_name == 'workflow_dispatch' && github.repository == 'NetSPI/OCISigner'
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - uses: actions/download-artifact@v7
+        with:
+          path: dist
+
+      - name: Create GitHub release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ inputs.tag }}
+          name: ${{ inputs.tag }}
+          prerelease: ${{ inputs.prerelease }}
+          generate_release_notes: true
+          append_body: true
+          body: ${{ inputs.release_notes }}
+          files: dist/**/*

.github/workflows/unit-tests.yml

@@ -0,0 +1,33 @@
+name: Unit Tests
+
+on:
+  push:
+    branches: [main, dev]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  unit-tests:
+    name: Unit Tests (jdk${{ matrix.java-version }}) [${{ github.ref_name }}]
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        java-version: ["25"]
+
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 1
+
+      - uses: actions/setup-java@v5
+        with:
+          distribution: temurin
+          java-version: ${{ matrix.java-version }}
+          cache: maven
+
+      - name: Run unit tests
+        run: mvn -B test