ci: migrate cli PR checks to gha

Author: PierreJeanjacquot

.github/workflows/cli-pr-checks.yml

@@ -0,0 +1,50 @@
+name: CLI PR checks
+description: check the CLI PR
+
+on:
+  pull_request:
+    paths: ['cli/**']
+
+concurrency:
+  group: ${{ github.ref }}-cli-pr-checks
+  cancel-in-progress: true
+
+jobs:
+  check-code:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install dependencies
+        working-directory: cli
+        run: npm ci
+
+      - name: Build
+        working-directory: cli
+        run: npm run build
+
+      - name: Check format
+        working-directory: cli
+        run: npm run check-format
+
+      - name: Lint
+        working-directory: cli
+        run: npm run lint
+
+      - name: Test no crash
+        working-directory: cli
+        run: |
+          npm i -g .
+          iapp -h
+
+  npm-dry-run:
+    uses: ./.github/workflows/reusable-cli-npm.yml
+    with:
+      dry-run: true

.github/workflows/reusable-cli-npm.yml

@@ -0,0 +1,38 @@
+name: npm publish
+description: reusable npm workflow for this project
+
+on:
+  workflow_call:
+    inputs:
+      dry-run:
+        description: 'Run in dry-run mode (the package will not be published)'
+        default: false
+        type: boolean
+      version:
+        description:
+          'Version to publish (leave empty to use package.json version)'
+        default: ''
+        type: string
+      tag:
+        description: 'npm publish tag (e.g., latest, nightly)'
+        default: ''
+        type: string
+    secrets:
+      npm-token:
+        description: 'NPM auth token (required unless `dry-run: true`)'
+        required: false
+
+jobs:
+  npm-publish:
+    uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/[email protected]
+    with:
+      working-directory: cli
+      install-command: npm ci
+      build-command: npm run build
+      dry-run: ${{ inputs.dry-run }}
+      tag: ${{ inputs.tag }}
+      version: ${{ inputs.version }}
+      environment: ${{ (inputs.dry-run && '') || inputs.tag }}
+      provenance: ${{ !inputs.dry-run }}
+    secrets:
+      npm-token: ${{ secrets.npm-token }}