Add CI validation for firmware and cloud builds

[tigerbryan]

Add GitHub Actions validation for the open-source repo.\n\nTargets:\n- ESP-IDF firmware build check\n- Cloud TypeScript build check\n- Secret/build artifact guard\n\nKeep CI lightweight and avoid committing generated firmware binaries.