CI: installer integrity test job

.gitea/workflows/ci.yml

@@ -128,6 +128,17 @@ jobs:
       - name: Build web UI
         run: cd web && npm ci && npm run build
 
+  installer-integrity:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        with:
+          go-version-file: agent/go.mod
+          cache: true
+      - name: Install template integrity
+        run: cd server && go test -run 'TestInstallTemplateRenders|TestFreshInstallConfigKeys|TestInstallTemplateScriptletSyntax' -v -count=1 ./internal/services/
+
   no-ai-attribution:
     runs-on: ubuntu-latest
     steps: