The crate previously had only leak-guard.yml and release.yml, so its ~42 tests never ran on push/PR — only on tag. Mirror the sibling crates' ci.yml (lint + test jobs, dtolnay/rust-toolchain@1.86.0, rust-cache). No --locked: this library does not track Cargo.lock (release.yml notes --locked would fail on a fresh runner).