ci: add clang-tidy

[N-R-K]

the list of checks as of now is fairly conservative.

one other check that might be worth enabling in the future:

• bugprone-narrowing-conversions: unfortunately it doesn't understand the semantics of optionsParseNum() and thus produces way too much noise.