feat: Initialize sbom repo with MoonBit skill submodule and CI

[Copilot]

Bootstraps the SCA/SBOM repository with the MoonBit toolchain integration required to develop and test MoonBit packages.

Changes

• Submodule: adds cogna-dev/moonbit-skill at .agents/skills/moonbit — makes the MoonBit coding skill available to agents in this repo
• CI workflow (.github/workflows/ci.yml): installs MoonBit via cogna-dev/moonbit-actions/setup@v0 and runs the standard gate: moon check → moon fmt --check → moon build → moon test on every push and PR
  • submodules: true on checkout so the skill submodule is present during CI runs
  • permissions: contents: read to scope GITHUB_TOKEN to least-privilege

- uses: actions/checkout@v4
  with:
    submodules: true

- uses: cogna-dev/moonbit-actions/setup@v0

- run: moon check && moon fmt --check && moon build && moon test

Original prompt

The Software Composition Analysis (SCA) library for Software Bill of Materials (SBOM)

You don't need to draft code. Because I had written code in another repository.

Please initialize this repository with moonbit action and skill in our organization.

Use:

https://github.com/cogna-dev/moonbit-skill as git submodule at .agents/skills/moonbit
https://github.com/cogna-dev/moonbit-actions use this action for moonbit ci testing