GitHub Actions: add shellcheck to PR workflow