release-kit 0.2.16

A canonical release workflow: a technology-agnostic method, per-technology bindings, and the rk CLI that lands and serves them.
Documentation
# The Nix-side proof of the landed capability. The named build is not
# redundant with the flake check: nix flake check builds only the checks
# output, so without it a repository whose flake release-kit did not
# author could go green having never compiled nix/package.nix. Actions
# are pinned by commit; versions.toml carries each pin's discovery ref
# and freshness check.
name: nix

permissions: {}

on:
  pull_request:
  push:
    branches: [master]

jobs:
  flake:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
      - uses: DeterminateSystems/nix-installer-action@90bb610b90bf290cad97484ba341453bd1cbefea # v19
      - uses: DeterminateSystems/magic-nix-cache-action@565684385bcd71bad329742eefe8d12f2e765b39 # v13
        with:
          use-flakehub: false
          use-gha-cache: true
      - run: nix build .#default
      - run: nix flake check