Add CI checks

.github/workflows/ci.yml

@@ -0,0 +1,52 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Go and docs
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: go.mod
+          cache: true
+
+      - name: Set up Terraform
+        uses: hashicorp/setup-terraform@v4
+        with:
+          terraform_version: "1.15.5"
+          terraform_wrapper: false
+
+      - name: Check Go formatting
+        run: |
+          files="$(gofmt -l cmd internal)"
+          if [ -n "$files" ]; then
+            echo "$files"
+            exit 1
+          fi
+
+      - name: Check Terraform examples
+        run: terraform fmt -check -recursive examples
+
+      - name: Test
+        run: go test -short -timeout=2m ./...
+
+      - name: Vet
+        run: go vet ./...
+
+      - name: Check generated docs
+        run: bash scripts/check-docs.sh

scripts/check-docs.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+# CI drift gate: regenerate docs/ with scripts/generate-docs.sh (the same
+# entry point `go generate ./...` uses) and fail if the committed docs differ.
+set -euo pipefail
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+bash "$root/scripts/generate-docs.sh"
+
+cd "$root"
+doc_status="$(git status --porcelain -- docs/index.md docs/resources docs/data-sources)"
+if [ -n "$doc_status" ]; then
+	echo "$doc_status"
+	git diff -- docs/index.md docs/resources docs/data-sources
+	exit 1
+fi