Adds .gitea/workflows/check.yml that runs docker build on push, matching the standard CI pattern used across all sneak/* repos. The Dockerfile already runs make check (fmt-check, lint, test) so a successful build implies all checks pass.
