feat: respect $VULP_REPO env override for update-check; add CI workflow

The compiled binary's update-check tile hardcoded dualfroz/fxg with no
way to override it, unlike the install scripts which already honor
$VULP_REPO — a fork or a future repo rename needed a rebuild just to
fix the tile. Also add .github/workflows/ci.yml (build + clippy -D
warnings + test on push/PR): the only existing workflow was the
tag-triggered release build, so nothing gated PRs before merge.

.github/workflows/ci.yml

@@ -0,0 +1,30 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  check:
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: clippy
+
+      - uses: Swatinem/rust-cache@v2
+
+      - name: Build
+        run: cargo build --all-targets
+
+      - name: Clippy
+        run: cargo clippy --all-targets -- -D warnings
+
+      - name: Test
+        run: cargo test

src/release_info.rs

@@ -7,8 +7,12 @@ use serde_json::Value;
 
 /// The GitHub repo this binary is published from. Shared with the installer
 /// scripts (`install/vulp-installer.sh`/`.ps1`), which hit the same
-/// `releases/latest` endpoint to fetch the newest build.
+/// `releases/latest` endpoint to fetch the newest build. Overridable via
-pub const VULP_REPO: &str = "dualfroz/fxg";
+/// `$VULP_REPO` (same env var the installers already honor), so a fork or a
+/// future rename doesn't require a rebuild just to fix the update-check tile.
+fn vulp_repo() -> String {
+    std::env::var("VULP_REPO").unwrap_or_else(|_| "dualfroz/fxg".to_string())
+}
 
 /// One GitHub release's metadata, trimmed to what the update tile shows.
 #[derive(Debug, Clone)]
@@ -43,14 +47,14 @@ async fn fetch_release(url: &str) -> Result<ReleaseInfo> {
 
 /// Info about the very latest release on GitHub, regardless of what's running.
 pub async fn fetch_latest() -> Result<ReleaseInfo> {
-    fetch_release(&format!("https://api.github.com/repos/{VULP_REPO}/releases/latest")).await
+    fetch_release(&format!("https://api.github.com/repos/{}/releases/latest", vulp_repo())).await
 }
 
 /// Info about the release matching the version actually running, if one was
 /// tagged (`v{CARGO_PKG_VERSION}`) — lets the tile show who shipped *this*
 /// build and when, not just what's newest.
 pub async fn fetch_current(version: &str) -> Result<ReleaseInfo> {
-    fetch_release(&format!("https://api.github.com/repos/{VULP_REPO}/releases/tags/v{version}")).await
+    fetch_release(&format!("https://api.github.com/repos/{}/releases/tags/v{version}", vulp_repo())).await
 }
 
 /// The `created_at` date (YYYY-MM-DD) of a GitHub user/org — for the General