Add Debian Bookworm x64 sanity build CI workflow

[Copilot]

Adds a GitHub Actions workflow to sanity-check compilation across all supported (non-deprecated) hardware configurations on Debian Bookworm x64.

Workflow design

• Single job, sequential hardware configs — reuses the CMake build directory across configs so third-party libs (LASzip, Livox SDK2) compile once; subsequent configs only rebuild changed translation units
• Container: debian:bookworm on ubuntu-latest
• Triggers: push to main, pull requests

Hardware configs covered

Header	Target
mandeye-standard-rpi4.h	Raspberry Pi 4
mandeye-standard-rpi5.h	Raspberry Pi 5
mandeye-pro-cm4-bookworm.h	CM4 + carrier board
mandeye-direct-cm5.h	CM5 + carrier board

mandeye-pro-cm4-bullseye.h (deprecated) is intentionally excluded.

Notes

• No release artifacts — sanity build only
• GITHUB_TOKEN scoped to contents: read

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Create sanity build for all supported platoforms on x64</issue_title>
<issue_description>Please create a sanity builder that will build on Debian Bookworm this project (iterate listed, supported devices).</issue_description>

<agent_instructions>- do not make any relase- it is sanity build

• build 1 hardware config than change and rebuild (to save time).
• do not chnage code for failed jobs.
  </agent_instructions>

Comments on the Issue (you are @copilot in this section)

• Fixes Create sanity build for all supported platoforms on x64 #82

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[michalpelka]

sudo update-ca-certificates
or export GIT_SSL_NO_VERIFY=1

[michalpelka]

@copilot please add :
sudo update-ca-certificates
or export GIT_SSL_NO_VERIFY=1

[Copilot]

@copilot please add :
sudo update-ca-certificates
or export GIT_SSL_NO_VERIFY=1

Done in commit 00f249b. Added ca-certificates to the apt install list and run update-ca-certificates before the checkout step so submodule fetching works with valid SSL certs in the Bookworm container.