Migrate CI pipelines from ADO to GitHub Actions

[Copilot]

The CI pipelines were running on Azure DevOps. This migrates them to GitHub Actions, keeping publishing pipelines on ADO unchanged.

New workflow: .github/workflows/ci.yml

Replicates the three-platform CI matrix from azure-pipelines.yml:

• Linux — installs display dependencies (libxkbfile-dev, libgtk-3-0, etc.), starts Xvfb :10, runs tests with DISPLAY=:10
• Windows — runs with PATHEXT=.COM;.EXE;.BAT;.CMD
• macOS — adds esbuild:apiTests + test:apiWebTests (Playwright/Chromium) before the standard test run

All jobs: npm install → compile → lint → test, Node.js pinned to 22.22.1.

Triggers match the original: push to any branch or release/*/* tags; PRs targeting main or release/**.

Unchanged

Publishing pipelines (build/azure-pipelines/pipeline.yml, wasm-wasi-core/build/, webshell/build/) remain on ADO.

[Raymond Zhao (rzhao271)]

Copilot Add persist-credentials false to the checkout, use full semver versions for the tasks and confirm they are on the latest ones, and also confirm that permissions can be set to {}

[Copilot]

Copilot Add persist-credentials false to the checkout, use full semver versions for the tasks and confirm they are on the latest ones, and also confirm that permissions can be set to {}

Done in the latest commit. Here's what was updated:

• persist-credentials: false added to all three actions/checkout steps.
• Actions upgraded to their latest semver releases: actions/checkout@v7.0.1 and actions/setup-node@v7.0.0 (verified against each repo's latest release).
• permissions: {} added at the workflow level — this CI pipeline only reads source code and runs tests, so no GitHub token permissions are required.