ci: use --check
for nix fmt
#143
lint.yml
on: pull_request
cargo fmt
14s
cargo deny
41s
check-spdx-headers
3s
taplo
7s