ci(sdk-node): add drift check and smoke test to CI

Without this, edits to crates/openshell-sdk-node/src/lib.rs that change
the napi surface would silently land with stale index.js / index.d.ts,
shipping a TypeScript SDK whose types lie about the runtime.

- New mise tasks: sdk-node:install, sdk-node:build, sdk-node:smoke, and
  sdk-node:check. The :check task rebuilds the binding, fails if the
  regenerated index.{js,d.ts} differ from HEAD, then runs the smoke
  suite.
- Wire sdk-node:check into [ci] so `mise run pre-commit` covers it.
- New "TypeScript SDK" job in branch-checks.yml runs sdk-node:check on
  linux-amd64 (the generated files are platform-agnostic; one arch is
  sufficient to catch drift).
- Commit crates/openshell-sdk-node/package-lock.json so `npm ci` in
  the new task is deterministic.

Author: maxdubrinsky

.github/workflows/branch-checks.yml

@@ -190,3 +190,34 @@ jobs:
 
       - name: Lint
         run: mise run markdown:lint
+
+  sdk-node:
+    name: TypeScript SDK (openshell-sdk-node)
+    needs: pr_metadata
+    if: needs.pr_metadata.outputs.should_run == 'true'
+    runs-on: linux-amd64-cpu8
+    env:
+      SCCACHE_GHA_ENABLED: "true"
+      SCCACHE_GHA_VERSION: branch-checks-sdk-node
+    container:
+      image: ghcr.io/nvidia/openshell/ci:latest
+      credentials:
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      - name: Configure GHA sccache backend
+        uses: mozilla-actions/sccache-action@9e7fa8a12102821edf02ca5dbea1acd0f89a2696 # v0.0.10
+
+      - name: Install tools
+        run: mise install --locked
+
+      - name: Cache Rust target and registry
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2
+        with:
+          shared-key: rust-sdk-node
+          cache-on-failure: "true"
+
+      - name: Verify SDK binding is in sync and smoke tests pass
+        run: mise run sdk-node:check

crates/openshell-sdk-node/.gitignore

@@ -1,3 +1,2 @@
 node_modules/
-package-lock.json
 *.node