feat: GitHub Actions CI/CD 파이프라인 구축

[koreahghg]

요약

• CI 워크플로에 포맷 검사(prettier)와 expo-doctor 검증을 추가하고, develop 브랜치도 트리거 대상에 포함
• PR 커밋 메시지 컨벤션 검사(commitlint), CodeQL 보안 분석, Gitleaks 시크릿 스캔 워크플로 추가
• Maestro E2E 테스트 워크플로 추가 (수동 실행 + main 푸시 시)
• main 브랜치 푸시 시 EAS 빌드(production, Android)가 자동으로 실행되도록 구성, 이를 위해 app.json에 EAS projectId 연결
• Dependabot으로 npm 패키지 및 GitHub Actions 버전 주간 자동 업데이트 설정

확인 필요

• GitHub 저장소 Secrets에 EXPO_TOKEN 등록 완료 (EAS 빌드 인증용)
• E2E 워크플로는 에뮬레이터 빌드 특성상 실행 시간이 길 수 있음 — 필요시 스케줄/캐시 조정 예정

테스트

• 각 워크플로 YAML 문법 검증
• PR 오픈 후 실제 CI 실행 결과 확인
• main 머지 후 EAS 빌드 정상 트리거 확인

[gemini-code-assist]

Code Review

This pull request introduces a Dependabot configuration file to automate updates for npm and GitHub Actions, and updates app.json with EAS project details and owner information. The feedback highlights a critical issue with automatically updating expo and react-native packages via Dependabot, as this can break compatibility with the Expo SDK. It is recommended to ignore these packages in Dependabot and update them manually using Expo CLI tools instead.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.