chore: add initial workflows

Signed-off-by: Sam Gammon <[email protected]>

.github/workflows/check.gradle-wrapper.yml

@@ -0,0 +1,24 @@
+name: "Checks: Gradle Wrapper"
+
+"on":
+  workflow_call: {}
+  workflow_dispatch: {}
+
+permissions:
+  contents: read
+
+jobs:
+  validation:
+    name: "Gradle Wrapper"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        with:
+          egress-policy: audit
+      - name: "Setup: Checkout"
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        with:
+            persist-credentials: false
+      - name: "Check: Gradle Wrappers"
+        uses: gradle/wrapper-validation-action@699bb18358f12c5b78b37bb0111d3a0e2276e0e2 # v2.1.1

.github/workflows/ci.build-test.yml

@@ -0,0 +1,27 @@
+name: "Build & Test"
+
+"on":
+  workflow_call: {}
+  workflow_dispatch: {}
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: "Build Repository"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        with:
+          egress-policy: audit
+      - name: "Setup: Checkout"
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        with:
+            persist-credentials: false
+      - name: "Setup: Java 21"
+        uses: actions/setup-java@v4
+        with:
+          java-version: '21'
+          distribution: 'zulu'

.github/workflows/on.pr.yml

@@ -0,0 +1,18 @@
+name: "PR"
+
+"on":
+  pull_request:
+    branches:
+        - main
+
+permissions:
+  contents: read
+
+jobs:
+  build-test:
+    name: "Build & Test"
+    uses: ./.github/workflows/ci.build-test.yml
+
+  checks-gradle:
+    name: "Checks"
+    uses: ./.github/workflows/check.gradle-wrapper.yml

.github/workflows/on.push.yml

@@ -0,0 +1,18 @@
+name: "Push"
+
+"on":
+  push:
+    branches:
+        - main
+
+permissions:
+  contents: read
+
+jobs:
+  build-test:
+    name: "Build & Test"
+    uses: ./.github/workflows/ci.build-test.yml
+
+  checks-gradle:
+    name: "Checks"
+    uses: ./.github/workflows/check.gradle-wrapper.yml