Runs fmt, clippy, and tests on the default branch, then builds release artifacts. Tag builds attach binaries to a release. Same shape as the GitHub Actions workflow, ported to shared runners.
