ci: Add lint job to run ast-grep on our C++ code

Closes: #28119

.gitlab-ci.yml

@@ -123,6 +123,13 @@ l:spellcheck:
         - .rules
     needs: []
 
+l:ast-grep:
+    extends:
+        - .cmake_ast_grep_linux
+        - .linux_x86_64_tags
+        - .rules
+    needs: []
+
 l:iwyu-debian13:
     extends:
         - .debian13_iwyu

.gitlab/ci/ast-grep-scan.sh

@@ -0,0 +1,2 @@
+#!/bin/sh
+ast-grep scan --error

.gitlab/os-linux.yml

@@ -796,6 +796,14 @@
         - .gitlab/ci/typos.bash
     interruptible: true
 
+.cmake_ast_grep_linux:
+    stage: build
+    extends: .fedora44
+    script:
+        - source .gitlab/ci/ast-grep-env.sh
+        - .gitlab/ci/ast-grep-scan.sh
+    interruptible: true
+
 .cmake_build_linux:
     stage: build