CI: add `static_checks.yml`

[nikitalita]

This fixes issues with maintenance failing. This should only be run on push since it has access to the github secrets and modifies the git history.

Instead, on PRs, run clang_format on only the changed files in the PR to determine if the PR follows the formatting rules, and if not, output the diff and fail.