CI: Add check-commit workflow and message checker

Add a reusable check-commit workflow and wire it into the main PR
pipeline as a prerequisite before the Linux build jobs run.

Move the commit message checker and its tests into cvm/conf,
enforce the 120-character title limit and 80-character body
limit, and reject Co-Authored-By and Change-Id trailers.

Author: duanyangjing

.github/workflows/check-commit.yml

@@ -0,0 +1,26 @@
+name: check-commit
+
+on:
+  workflow_call:
+    inputs:
+      base-ref:
+        required: true
+        type: string
+
+jobs:
+  check-commit:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.x"
+
+      - name: Check commit messages
+        run: |
+          python3 cvm/conf/check_commit.py --range origin/${{ inputs.base-ref }}..HEAD

.github/workflows/main.yml

@@ -49,6 +49,13 @@ concurrency:
 
 jobs:
 
+  check-commit:
+    name: check-commit
+    if: github.event_name == 'pull_request'
+    uses: ./.github/workflows/check-commit.yml
+    with:
+      base-ref: ${{ github.base_ref }}
+
   ###
   ### Determine platforms to include
   ###
@@ -112,25 +119,29 @@ jobs:
 
   build-linux-x64:
     name: linux-x64
-    needs: select
+    needs:
+      - select
+      - check-commit
     uses: ./.github/workflows/build-linux.yml
     with:
       platform: linux_x64
       apt-gcc-version: '9'
       runs-on: ubuntu-22.04
     # The linux-x64 jdk bundle is used as buildjdk for the cross-compile job
-    if: needs.select.outputs.linux-x64 == 'true' || needs.select.outputs.linux-cross-compile == 'true'
+    if: (github.event_name != 'pull_request' || needs.check-commit.result == 'success') && (needs.select.outputs.linux-x64 == 'true' || needs.select.outputs.linux-cross-compile == 'true')
 
   build-linux-aarch64:
     name: linux-aarch64
-    needs: select
+    needs:
+      - select
+      - check-commit
     uses: ./.github/workflows/build-linux.yml
     with:
       platform: linux_aarch64
       apt-gcc-version: '9'
       runs-on: ubuntu-22.04-arm
     # The linux-aarch64 jdk bundle is used as buildjdk for the cross-compile job
-    if: needs.select.outputs.linux-aarch64 == 'true' || needs.select.outputs.linux-cross-compile == 'true'
+    if: (github.event_name != 'pull_request' || needs.check-commit.result == 'success') && (needs.select.outputs.linux-aarch64 == 'true' || needs.select.outputs.linux-cross-compile == 'true')
 
   ###
   ### GTest jobs