fix: read version from package.json, add CI workflow (#15)

* fix: read version from package.json, add CI workflow, gitignore package-lock

- Read version dynamically from package.json in index.ts (#10)
- Add CI workflow to typecheck/build on PRs using self-hosted runner (#11)
- Add packages/cli/package-lock.json to .gitignore (#12)

from CC

* fix: correct version import path and use resolveJsonModule

- Fix path bug: ../../package.json → ../package.json (was resolving to wrong file)
- Replace require() + eslint-disable with clean ES import using resolveJsonModule
- Revert package-lock.json gitignore exclusion for reproducible npm CI builds

from CC

* fix: move version import to top with other imports

from CC

---------

Co-authored-by: l0r3x <me@l0r3x.cloud>

Author: GreyC