ci: add canary release workflow for PR builds

Publishes canary npm release on every PR commit with version
format 0.1.0-canary.<short-sha> using --tag canary.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: rsbh

.github/workflows/canary.yml

@@ -0,0 +1,40 @@
+name: canary
+
+on:
+  pull_request:
+    types: [opened, synchronize]
+
+jobs:
+  canary-release:
+    name: Publish canary to npm
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    defaults:
+      run:
+        working-directory: ./packages/chronicle
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+        working-directory: .
+
+      - name: Build CLI
+        run: bun build-cli.ts
+
+      - name: Set canary version
+        run: |
+          SHORT_SHA=$(echo "${{ github.event.pull_request.head.sha }}" | cut -c1-7)
+          VERSION=$(jq -r .version package.json)-canary.${SHORT_SHA}
+          jq --arg v "$VERSION" '.version = $v' package.json > package.tmp.json
+          mv package.tmp.json package.json
+          echo "Published version: $VERSION"
+
+      - name: Publish
+        run: bun publish --tag canary --access public
+        env:
+          NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}