Add CI workflow with badge and tooling

[benrfairless]

Summary

• add the CI workflow that runs build, matrix tests, lint, and bundler-audit with Ruby setup and sane permissions/concurrency
• declare rspec, rubocop, and bundler-audit, add specs plus a RuboCop baseline to ensure coverage for the new checks
• document the workflow with a README badge so status is visible from master