Add ci-doctor under Tools > CI/CD

[depmedicdev-byte]

What this adds

• ci-doctor - Free CLI that audits GitHub Actions workflows for cost waste and security gaps. Useful for SRE teams trying to cap CI spend.

Why

ci-doctor is a free MIT-licensed CLI that audits GitHub Actions workflows for cost waste, security gaps (forked-PR pwn_request, unpinned actions, GITHUB_TOKEN write_all), and reliability issues (no timeout-minutes, missing concurrency:). It runs in <1s on most repos, uploads SARIF to GitHub Code Scanning via a companion Action, and posts a sticky PR comment.

It's actively maintained, has a sister CLI for every major CI provider (GitLab, Bitbucket, Azure Pipelines, CircleCI), and ships a public leaderboard scanning the top 100 actions/* repos.

Conformance to the list

• Single-line entry in the requested section
• Verb-first description, trailing period
• Canonical repo URL as the link target

Happy to revise; ping me on this PR. Thanks for maintaining the list.

[depmedicdev-byte]

Apologies - the first version added a new ## CI/CD section after the Podcasts section, which is not the right placement. I have corrected the branch to place the entry inside the existing ## SRE Tools section, alphabetically.

Single-line addition now. Happy to adjust further.