ci: Add Hadolint step to lint Dockerfiles

[IvanGoncharov]

No description provided.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[Copilot]

Pull Request Overview

This PR adds a Hadolint step to the CI pipeline and refactors how the WebAssembly worker is built by replacing the old worker/bundle.js with a TypeScript-based bundler script.

• Add a Dockerfile linting step using Hadolint in CI.
• Remove legacy worker/bundle.js and introduce scripts/bundle_worker.ts for worker bundling.
• Update worker Dockerfile and example Dockerfiles for improved SHELL settings, WORKDIR/CMD conventions, and bump Node versions.

Reviewed Changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
worker/bundle.js	Removed legacy JavaScript bundling file.
worker/Dockerfile	Added pipefail shell, adjusted WORKDIR paths, and switched CMD.
scripts/utils.ts	Exported spawnOutput for use in bundling script.
scripts/bundle_worker.ts	New TypeScript script to build and hash the worker via Docker.
package.json	Updated "build:worker" to run the new TS bundler script.
example/webpack/Dockerfile	Bumped base image to node:24, set absolute WORKDIR and JSON CMD.
example/express-server/Dockerfile	Set absolute WORKDIR and JSON CMD.
docker-compose.yml	Removed volume mount for worker-dist.
.github/workflows/ci.yml	Added a Hadolint linting step for Dockerfiles.

[Copilot]

The word 'bellow' is misspelled. It should be 'below'.

Suggested change

	# Since bellow RUN commands use pipes set "pipefail"
	# Since below RUN commands use pipes set "pipefail"