Setup a PR verification job which runs shellcheck

Could use: 

```
shellcheck \
  --exclude=SC2086,SC2155 \
 --external-sources --source-path=$PATH_WITH_CONFIG_TEMPLATE \
 --severity=info
 orth
``` 