Lint

DNS robustness: fix bootstrap deadlock + secondary AdGuard on the Pi #193

	name: Lint

	on:
	push:
	branches: [main]
	pull_request:

	jobs:
	shellcheck:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Run ShellCheck
	uses: ludeeus/action-shellcheck@2.0.0
	with:
	scandir: .
	severity: warning

	json-validate:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Validate JSON files
	run: \|
	failed=0
	for f in $(find . -name '.json' -not -path './.git/'); do
	if ! jq empty "$f" 2>/dev/null; then
	echo "❌ Invalid JSON: $f"
	failed=1
	else
	echo "✓ $f"
	fi
	done
	exit $failed

	validate-packages:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Validate packages.json schema
	run: bash scripts/validate-packages.sh

	dryrun-smoke:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Root setup.sh dry-run on every platform
	run: bash scripts/dryrun-smoke.sh

	zsh-syntax:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Install zsh
	run: sudo apt-get update && sudo apt-get install -y zsh

	- name: Run zsh -n on zsh scripts
	run: \|
	failed=0
	for f in $(find . -not -path './.git/' $ -name '.zsh' -o -name 'zshrc.example' $); do
	if zsh -n "$f" 2>&1; then
	echo "✓ $f"
	else
	echo "❌ Syntax error: $f"
	failed=1
	fi
	done
	exit $failed

Provide feedback