ci: add Gradle checkstyle/lint step to build pipeline

\`build.yml\` only runs \`./gradlew build\`. There is no static analysis step. Adding explicit lint enforcement ensures code style violations fail the CI pipeline.

**Acceptance criteria:**
- [ ] Checkstyle or SpotBugs configured in Gradle
- [ ] CI fails on violations
- [ ] Existing code passes the configured rules