Add github actions workflows

.github/dependabot.yml

@@ -0,0 +1,15 @@
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    allow:
+      - dependency-type: "all"
+    groups:
+        dependencies:
+          patterns: ["*"]
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/ci.yml

@@ -0,0 +1,40 @@
+---
+name: ci
+
+on: [push, pull_request, merge_group]
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    container:
+      image: registry.fedoraproject.org/fedora:37
+    steps:
+      - run: dnf install -y git make
+      - uses: actions/checkout@v4
+      - name: Install dependencies
+        run: |
+          make test-deps
+          pip install poetry==1.8.2
+          poetry install --no-ansi
+      - name: Run linters
+        run: |
+          git config --global --add safe.directory '*'
+          make lint
+  build-rpm:
+    runs-on: ubuntu-latest
+    container:
+      image: registry.fedoraproject.org/fedora:37
+    steps:
+      - run: dnf install -y git make
+      - uses: actions/checkout@v4
+      - name: Install dependencies
+        run: |
+          make build-deps
+      - name: Build RPM
+        run: |
+          git config --global --add safe.directory '*'
+          make build-rpm
+      - name: Check reproducibility
+        run: |
+          make test-deps
+          make reprotest

.github/workstation-ci.yml

@@ -0,0 +1,2 @@
+# for <https://github.com/freedomofpress/securedrop-workstation-ci>
+qubes: "4.2"