[codex] Migrate CI to GitHub Actions

[fkorotkov]

What changed

• Replaced the Cirrus CI configuration with a GitHub Actions workflow on standard GitHub-hosted macOS runners.
• Migrated linting, the Sequoia/Tahoe test matrix, release dry runs, tagged releases, and artifact upload.
• Switched release credentials from Cirrus encrypted values to GitHub Actions secrets (GORELEASER_KEY) plus the built-in GITHUB_TOKEN.

Dropped bare-metal coverage

No bare-metal-only Cirrus tasks were present in this repository's Cirrus configuration, so no tasks were dropped for this migration.

Validation

• Parsed .github/workflows/ci.yml locally with Ruby YAML.
• Ran git diff --check.
• Confirmed no Sentry references remain in the migrated workflow files.

actionlint was not installed locally, so I could not run workflow semantic linting before opening this draft.