* ci: add pipeline segment to run clang-tidy
* chore: set -header-filter='' for clang-tidy
Breaking change in `clang-tidy` 22.0.0:
> clang-tidy now displays warnings from all non-system headers by default.
> Previously, users had to explicitly opt-in to header warnings using
> -header-filter=’.*’. To disable warnings from non-system, set
> -header-filter to an empty string.