chore(ci): add static binary check

.woodpecker/build.yml

@@ -3,7 +3,7 @@ platform: 'linux/amd64'
 when:
   branch:
     exclude: [main]
-  event: push
+  event: [push, pull_request]
 
 steps:
   build:
@@ -11,4 +11,6 @@ steps:
     commands:
       - apk add --no-cache build-base libarchive libarchive-dev
       - cargo build --verbose
+      # Binaries, even debug ones, should be statically compiled
+      - '[ "$(readelf -d target/debug/rieterd | grep NEEDED | wc -l)" = 0 ]'