v0.36.0 — make-checks.yml

Lint and test for repos whose toolchain lives in their container, with no
setup-go / setup-python step installing something nothing uses. Inputs:
lint_command, test_command, dep_command, coverage_file, coverage_artifact,
runs_on; the command inputs take '-' or '' to skip a step.

Lint and test run as steps in one job, not two parallel jobs, because parallel
jobs would each rebuild the repo's dev image from scratch. dep_command is off by
default: a container-built dependency env cannot be handed to a host step.

New workflow only. No existing workflow changes behaviour.