Add CI/CD pipelines

[russtaylor]

Run them automatically on all PRs (block PRs where checks aren't passing), and all merges to main.