Add CI for Profiles Conformance Tool

Rename the `migrate.yml` workflow to `tools.yml` to reflect its expanded
scope.

Add a new job to build and run the test suite for the profiles conformance
tool. This ensures the tool is validated on every pull request.

Signed-off-by: Simo Sorce <simo@redhat.com>

Author: simo5

.github/workflows/migrate.yml .github/workflows/tools.yml.github/workflows/migrate.yml renamed to .github/workflows/tools.yml

@@ -1,5 +1,5 @@
 ---
-name: Migrate Tool
+name: Tools
 
 on:
   pull_request:
@@ -57,3 +57,53 @@ jobs:
           path: |
             target/debug/build/*/output
             target/i686-unknown-linux-gnu/debug/build/*/output
+
+  build:
+    name: Profiles Conformance Tool
+    runs-on: ubuntu-22.04
+    strategy:
+      fail-fast: false
+      matrix:
+        name: [standard]
+    container: quay.io/fedora/fedora:latest
+    steps:
+      - name: Get Date for DNF cache entry
+        id: get-date
+        run: |
+          echo "date=$(/bin/date -u "+%Y%V")" >> $GITHUB_OUTPUT
+        shell: bash
+
+      - name: Restore DNF cache
+        uses: actions/cache/restore@v4
+        with:
+          path: |
+            /var/cache/libdnf5
+          key: ${{ runner.os }}-dnf-${{ steps.get-date.outputs.date }}
+
+      - name: Install Dependencies
+        run: |
+          dnf -y install git cargo clang-devel openssl-devel sqlite-devel
+          if [ "${{ matrix.name }}" = "i686" ]; then
+            dnf -y install rust-std-static.i686 openssl-devel.i686 \
+              sqlite-devel.i686
+          fi
+
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Setup
+        run: |
+          git config --global --add safe.directory /__w/kryoptic/kryoptic
+
+      - name: Build & test
+        run: |
+          cargo build -vv --features profiles --all
+          tools/profiles/test.sh --debug
+
+      - uses: actions/upload-artifact@v4
+        if: failure()
+        with:
+          name: Build logs ${{ matrix.name }}
+          path: |
+            target/debug/build/*/output
+            target/i686-unknown-linux-gnu/debug/build/*/output