ci: add GitHub Actions for CI and pub.dev publishing

- ci.yml: runs on every PR and push to master (analyze, format check, tests)
- publish.yml: publishes to pub.dev on v* tag push using OIDC (no stored secrets)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: yadaniyil

.github/workflows/ci.yml

@@ -0,0 +1,29 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches: [master]
+
+jobs:
+  test:
+    name: Test & Analyze
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: subosito/flutter-action@v2
+        with:
+          channel: stable
+
+      - name: Install dependencies
+        run: flutter pub get
+
+      - name: Analyze
+        run: flutter analyze lib/ test/ example/
+
+      - name: Format check
+        run: dart format --set-exit-if-changed .
+
+      - name: Test
+        run: flutter test --coverage --test-randomize-ordering-seed random

.github/workflows/publish.yml

@@ -0,0 +1,32 @@
+name: Publish to pub.dev
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  publish:
+    name: Publish
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write  # required for OIDC pub.dev publishing
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: subosito/flutter-action@v2
+        with:
+          channel: stable
+
+      - name: Install dependencies
+        run: flutter pub get
+
+      - name: Analyze
+        run: flutter analyze lib/ test/
+
+      - name: Test
+        run: flutter test --test-randomize-ordering-seed random
+
+      - name: Publish
+        run: flutter pub publish --force