Add CLI framework, CI workflows, and linting (Topic 1) (#2)

Implement the foundational DCM CLI structure:
- Cobra-based root command with global flags (api-gateway-url, output,
timeout, config)
- Subcommand group stubs for policy, catalog service-type, catalog item,
and catalog instance
- Version command with build-time ldflags injection
- Makefile with build, test, fmt, vet, lint, and clean targets
- .gitignore and .gitattributes for project hygiene

Add CI and code quality tooling:
- GitHub CI workflows for linting, testing, and commit checks using
shared workflows
- golangci-lint configuration aligned with other dcm repos

Include Ginkgo tests covering TC-U019 through TC-U023.

Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: ygalblum

.ai/checkpoints/topic-1-cli-framework.md

@@ -0,0 +1,3 @@
+# Mark generated files so GitHub collapses them in PRs
+*.gen.go linguist-generated=true
+.ai/checkpoints/** linguist-generated=true

.gitattributes

@@ -0,0 +1,9 @@
+name: Check Clean Commits
+
+on:
+  pull_request:
+    branches: [main]
+
+jobs:
+  check-clean-commits:
+    uses: dcm-project/shared-workflows/.github/workflows/check-clean-commits.yaml@main

.github/workflows/check-clean-commits.yaml

@@ -0,0 +1,11 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  ci:
+    uses: dcm-project/shared-workflows/.github/workflows/go-ci.yaml@main

.github/workflows/ci.yaml

@@ -0,0 +1,11 @@
+name: Lint
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  lint:
+    uses: dcm-project/shared-workflows/.github/workflows/go-lint.yaml@main

.github/workflows/lint.yaml

@@ -0,0 +1,36 @@
+# If you prefer the allow list template instead of the deny list, see community template:
+# https://github.com/github/gitignore/blob/main/community/Golang/Go.AllowList.gitignore
+#
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+bin/
+
+# Test binary, built with `go test -c`
+*.test
+
+# Code coverage profiles and other test artifacts
+*.out
+coverage.*
+*.coverprofile
+profile.cov
+
+# Dependency directories (remove the comment below to include it)
+vendor/
+
+# Go workspace file
+go.work
+go.work.sum
+
+# env file
+.env
+
+# Editor/IDE
+# .idea/
+# .vscode/
+
+# E2E test artifacts
+test/e2e/*.test

.gitignore

@@ -0,0 +1,70 @@
+version: "2"
+run:
+  modules-download-mode: readonly
+
+formatters:
+  enable:
+    - gofumpt
+    - goimports
+  exclusions:
+    generated: disable
+
+linters:
+  enable:
+    - asasalint
+    - asciicheck
+    - bidichk
+    - bodyclose
+    - copyloopvar
+    - decorder
+    - dogsled
+    - durationcheck
+    - errchkjson
+    - exptostd
+    - fatcontext
+    - ginkgolinter
+    - gocheckcompilerdirectives
+    - gochecksumtype
+    - gocritic
+    - goprintffuncname
+    - grouper
+    - iface
+    - inamedparam
+    - interfacebloat
+    - makezero
+    - mirror
+    - misspell
+    - nilerr
+    - nilnesserr
+    - nolintlint
+    - nosprintfhostport
+    - prealloc
+    - protogetter
+    - reassign
+    - recvcheck
+    - revive
+    - rowserrcheck
+    - sqlclosecheck
+    - staticcheck
+    - testableexamples
+    - unconvert
+    - unparam
+    - usestdlibvars
+    - usetesting
+    - wastedassign
+    - whitespace
+  settings:
+    staticcheck:
+      checks:
+        - all
+        - -ST1003 # https://staticcheck.dev/docs/checks/#ST1003 Poorly chosen identifier.
+        - -QF1008 # https://staticcheck.dev/docs/checks/#QF1008 Omit embedded fields from selector expression.
+    nolintlint:
+      require-specific: true
+    revive:
+      rules:
+        - name: unused-parameter
+
+issues:
+  max-issues-per-linter: 0
+  max-same-issues: 0

.golangci.yml

@@ -0,0 +1,33 @@
+VERSION ?= $(shell git describe --tags --always --dirty)
+COMMIT  ?= $(shell git rev-parse --short HEAD)
+BUILD_TIME ?= $(shell date -u '+%Y-%m-%dT%H:%M:%SZ')
+
+LDFLAGS = -X github.com/dcm-project/cli/internal/version.Version=$(VERSION) \
+          -X github.com/dcm-project/cli/internal/version.Commit=$(COMMIT) \
+          -X github.com/dcm-project/cli/internal/version.BuildTime=$(BUILD_TIME)
+
+.PHONY: build test test-e2e fmt vet lint clean tidy
+
+build: tidy
+	go build -ldflags "$(LDFLAGS)" -o bin/dcm ./cmd/dcm
+
+test: tidy
+	go run github.com/onsi/ginkgo/v2/ginkgo -r --randomize-all --randomize-suites --fail-on-pending --keep-going --race --trace ./internal/...
+
+test-e2e: tidy
+	go run github.com/onsi/ginkgo/v2/ginkgo -r --randomize-all --randomize-suites --fail-on-pending --keep-going --race --trace --tags=e2e ./test/e2e/...
+
+fmt:
+	go fmt ./...
+
+vet: tidy
+	go vet ./...
+
+lint:
+	golangci-lint run ./...
+
+clean:
+	rm -rf bin/
+
+tidy:
+	go mod tidy

Makefile

@@ -0,0 +1,9 @@
+package main
+
+import (
+	"github.com/dcm-project/cli/internal/commands"
+)
+
+func main() {
+	commands.Execute()
+}

cmd/dcm/main.go

@@ -0,0 +1,26 @@
+module github.com/dcm-project/cli
+
+go 1.25.4
+
+require (
+	github.com/onsi/ginkgo/v2 v2.28.1
+	github.com/onsi/gomega v1.39.1
+	github.com/spf13/cobra v1.10.2
+)
+
+require (
+	github.com/Masterminds/semver/v3 v3.4.0 // indirect
+	github.com/go-logr/logr v1.4.3 // indirect
+	github.com/go-task/slim-sprig/v3 v3.0.0 // indirect
+	github.com/google/go-cmp v0.7.0 // indirect
+	github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 // indirect
+	github.com/inconshreveable/mousetrap v1.1.0 // indirect
+	github.com/spf13/pflag v1.0.9 // indirect
+	go.yaml.in/yaml/v3 v3.0.4 // indirect
+	golang.org/x/mod v0.32.0 // indirect
+	golang.org/x/net v0.49.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
+	golang.org/x/sys v0.40.0 // indirect
+	golang.org/x/text v0.33.0 // indirect
+	golang.org/x/tools v0.41.0 // indirect
+)