Add secret helper for external key management #131

	name: CI

	on:
	push:
	branches: [main]
	pull_request:

	jobs:
	test:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	submodules: recursive
	- uses: actions/setup-node@v4
	with:
	node-version: '20'
	- uses: actions-rust-lang/setup-rust-toolchain@v1
	- name: Install wasm-pack
	run: cargo install wasm-pack
	- name: Run cargo tests
	run: cargo test --workspace --all-targets --release
	- name: Build tap-wasm package
	working-directory: tap-wasm
	run: wasm-pack build --target web --out-dir pkg
	- name: Copy WASM files to tap-ts
	run: \|
	mkdir -p tap-ts/wasm
	cp tap-wasm/pkg/tap_wasm*.js tap-ts/wasm/
	cp tap-wasm/pkg/tap_wasm*.wasm tap-ts/wasm/
	cp tap-wasm/pkg/tap_wasm*.d.ts tap-ts/wasm/
	- name: Install Node dependencies
	working-directory: tap-ts
	run: npm ci
	- name: Run Node tests
	working-directory: tap-ts
	run: npm test --if-present

	formatting:
	name: cargo fmt
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	submodules: recursive
	# Ensure rustfmt is installed and setup problem matcher
	- uses: actions-rust-lang/setup-rust-toolchain@v1
	with:
	components: rustfmt
	- name: Rustfmt Check
	uses: actions-rust-lang/rustfmt@v1

	clippy:
	name: cargo clippy
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	submodules: recursive
	- uses: actions-rust-lang/setup-rust-toolchain@v1
	with:
	components: clippy
	- name: Run clippy
	run: cargo clippy --workspace --all-targets --release

Provide feedback