feat: add commit-check reusable workflow and org-level config

- Add cchk.toml as the organization-level base config for inherit_from
- Add commit-check reusable workflow (.github/workflows/commit-check.yml)
  for other repositories to consume
- Add commit-check-self.yml for the .github repo to eat its own dog food

The cchk.toml serves as the shared base config that other repos
can inherit via:
  inherit_from = "github:commit-check/.github:cchk.toml"

Other repos can reuse the workflow by calling:
  commit-check/.github/.github/workflows/commit-check.yml@main

Author: shenxianpeng

.github/workflows/commit-check-self.yml

@@ -0,0 +1,25 @@
+name: Commit Check (self)
+
+on:
+  push:
+    branches: 'main'
+  pull_request:
+    branches: 'main'
+    types: [opened, synchronize, reopened, edited]
+
+concurrency:
+  group: commit-check-self-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  commit-check:
+    name: commit-check
+    uses: ./.github/workflows/commit-check.yml
+    with:
+      message: true
+      branch: true
+      author-name: true
+      author-email: true
+      job-summary: true
+      pr-comments: ${{ github.event_name == 'pull_request' }}
+      pr-title: true

.github/workflows/commit-check.yml

@@ -0,0 +1,70 @@
+name: Commit Check
+
+on:
+  workflow_call:
+    inputs:
+      message:
+        description: Check git commit message following Conventional Commits
+        required: false
+        type: boolean
+        default: true
+      branch:
+        description: Check git branch name following Conventional Branch
+        required: false
+        type: boolean
+        default: true
+      author-name:
+        description: Check committer author name
+        required: false
+        type: boolean
+        default: false
+      author-email:
+        description: Check committer author email
+        required: false
+        type: boolean
+        default: false
+      dry-run:
+        description: Run checks without failing
+        required: false
+        type: boolean
+        default: false
+      job-summary:
+        description: Display job summary to the workflow run
+        required: false
+        type: boolean
+        default: true
+      pr-comments:
+        description: Post results to the pull request comments
+        required: false
+        type: boolean
+        default: false
+      pr-title:
+        description: Check pull request title following Conventional Commits
+        required: false
+        type: boolean
+        default: false
+
+concurrency:
+  group: commit-check-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  commit-check:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          fetch-depth: 0  # Required for merge-base checks
+      - uses: commit-check/commit-check-action@v2
+        with:
+          message: ${{ inputs.message }}
+          branch: ${{ inputs.branch }}
+          author-name: ${{ inputs.author-name }}
+          author-email: ${{ inputs.author-email }}
+          dry-run: ${{ inputs.dry-run }}
+          job-summary: ${{ inputs.job-summary }}
+          pr-comments: ${{ inputs.pr-comments && github.event_name == 'pull_request' }}
+          pr-title: ${{ inputs.pr-title }}

cchk.toml

@@ -0,0 +1,23 @@
+[commit]
+# https://www.conventionalcommits.org
+conventional_commits = true
+subject_capitalized = false
+subject_imperative = true
+subject_max_length = 100
+subject_min_length = 5
+allow_commit_types = ["feat", "fix", "docs", "style", "refactor", "test", "chore", "ci"]
+allow_merge_commits = true
+allow_revert_commits = true
+allow_empty_commits = false
+allow_fixup_commits = true
+allow_wip_commits = false
+require_body = false
+require_signed_off_by = false
+ignore_authors = ["dependabot[bot]", "copilot[bot]", "pre-commit-ci[bot]", "coderabbitai[bot]"]
+
+[branch]
+# https://conventional-branch.github.io/
+conventional_branch = true
+allow_branch_types = ["feature", "bugfix", "hotfix", "release", "chore", "feat", "fix", "ai", "claude", "codex", "copilot", "cursor"]
+require_rebase_target = "main"
+ignore_authors = ["dependabot[bot]", "copilot[bot]", "pre-commit-ci[bot]", "shenxianpeng"]