feat: Create github-action

[macalbert]

What does this PR do?

This PR introduces the Envilder GitHub Action - a new composite action that enables seamless integration of AWS SSM Parameter Store secrets into GitHub Actions workflows.

Key Changes

🎯 New GitHub Action

• Composite action (github-action/action.yml) for pulling AWS SSM secrets into .env files
• Bundled with @vercel/ncc - single optimized minified file (~786KB) for fast loading
• Pre-built distribution - users can use the action without any build steps
• New application entry point (src/apps/gha/) dedicated to GitHub Action runtime
• Full documentation with examples for basic usage, multi-environment deployments, and troubleshooting

🧪 Testing & Quality

• E2E tests for GitHub Action (e2e/gha.test.ts) simulating real GitHub Actions environment
• LocalStack integration for AWS SSM testing in CI
• Automated workflows:
  • test-action.yml - Tests the action on every PR
  • verify-action-build.yml - Ensures the bundled action stays up-to-date
  • publish-action.yml - Publishes action releases with version tags

📦 Build & Tooling

• Migrated from npm to pnpm across all workflows and documentation
• Added pnpm-workspace.yaml for better dependency management
• New build scripts:
  • build:gha - Bundles GitHub Action with ncc
  • verify:gha - Verifies action bundle is up-to-date
• Removed package-lock.json, added pnpm-lock.yaml

📚 Documentation

• New comprehensive docs:
  • docs/github-action.md - Complete GitHub Action guide
  • docs/CHANGELOG.md - Full project changelog with conventional commits format
  • docs/SECURITY.md - Security policy and best practices
  • docs/architecture/README.md - Architecture documentation with diagrams
  • docs/conventional-commits.md - Commit message guide
  • github-action/README.md - Action-specific README for GitHub Marketplace
• Updated existing docs to reflect pnpm migration and GitHub Action availability

🔧 Configuration & CI

• Added Commitlint (.commitlintrc.json) for conventional commits enforcement
• Updated all workflows to use pnpm instead of npm
• Added .markdownlintignore for generated changelog
• Improved .gitignore for GitHub Action dist files
• Updated README with GitHub Action reference and new documentation links
• Updated ROADMAP to mark GitHub Action as completed

Related issues

Implements GitHub Action support for Envilder

Type of change

• Feature
• Documentation

Checklist

• Tests added/updated (E2E tests for GitHub Action)
• Docs updated (comprehensive documentation added)
• Lint/format pass

Notes for reviewer

New Feature Highlight 🌟

This PR adds a GitHub Action to the Envilder ecosystem, making it easy for teams to pull AWS SSM secrets directly in their CI/CD workflows:

- uses: macalbert/envilder/github-action@v1
  with:
    map-file: param-map.json
    env-file: .env

Testing

• All E2E tests pass with LocalStack
• The bundled action (github-action/dist/index.js) is verified in CI
• Real-world GitHub Actions workflow has been tested successfully

Migration to pnpm

• All npm commands replaced with pnpm equivalents
• Improved build performance and disk space usage
• No changes to the CLI functionality - backward compatible

Action Publishing

The action is bundled with @vercel/ncc to create a single optimized file, ensuring:

• ✅ Fast startup (no node_modules resolution)
• ✅ Zero build steps for users
• ✅ Minimal repository size (only tracking bundled output)

The publish workflow (publish-action.yml) handles version tagging and release creation automatically.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.