ci: init flake check

.github/workflows/ci.yml

@@ -0,0 +1,31 @@
+name: "ci"
+on:
+  workflow_dispatch: # allows manual triggering
+  pull_request:
+    branches: [main]
+    paths-ignore:
+      - '**.md'
+  push:
+    branches: [main]
+    paths-ignore:
+      - '**.md'
+  merge_group:
+jobs:
+  flake-check:
+    runs-on: ubuntu-latest
+    environment: cachix
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0 # Nix Flakes doesn't work on shallow clones
+      - uses: cachix/install-nix-action@V27
+        with:
+          extra_nix_config: |
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+      - uses: cachix/cachix-action@v15
+        with:
+          name: kenji
+          # If you chose API tokens for write access OR if you have a private cache
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+      - name: "flake check"
+        run: nix flake check -Lvv --no-update-lock-file

nix/checks.nix

@@ -7,7 +7,7 @@ _: {
           fe
           cargoArtifacts
           cargoClippy
-          cargoDeny
+          # cargoDeny
           cargoDoc
           cargoTest
           cargoTarpaulin