ci(perf): run three independent qualification jobs

Refs #686

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

Author: owjs3901

.github/workflows/glue-performance.yml

@@ -0,0 +1,83 @@
+name: Glue marshalling qualification
+on:
+  push:
+    branches: [ci/glue-marshalling-perf]
+permissions:
+  contents: read
+jobs:
+  qualify:
+    runs-on: ubuntu-latest
+    timeout-minutes: 120
+    strategy:
+      fail-fast: false
+      matrix:
+        job: [1, 2, 3]
+    env:
+      CARGO_BUILD_JOBS: '2'
+      RUSTUP_TOOLCHAIN: stable
+      MATRIX_JOB: ${{ matrix.job }}
+      PERF_ROOT: ${{ runner.temp }}/glue-performance
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: actions-rust-lang/setup-rust-toolchain@v2
+        with:
+          toolchain: stable
+          target: wasm32-unknown-unknown
+          cache: false
+      - uses: actions/setup-node@v7
+        with:
+          node-version: latest
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - uses: jetli/wasm-pack-action@v0.4.0
+        with:
+          version: latest
+      - name: Stage exact sources and shared tools
+        run: |
+          set -euo pipefail
+          mkdir -p "$PERF_ROOT/base" "$PERF_ROOT/candidate" "$PERF_ROOT/reports" "$PERF_ROOT/binaryen"
+          git archive 2234c27a9d7fb9a6367ed4f91cdecd7fbd28f1c0 | tar -x -C "$PERF_ROOT/base"
+          git archive "$GITHUB_SHA" | tar -x -C "$PERF_ROOT/candidate"
+          git rev-parse '2234c27a^{tree}' "$GITHUB_SHA^{tree}" > "$PERF_ROOT/reports/trees.txt"
+          cmp "$PERF_ROOT/base/Cargo.lock" "$PERF_ROOT/candidate/Cargo.lock"
+          curl -L --proto '=https' --tlsv1.2 -sSf https://github.com/@raw/cargo-bins/cargo-binstall/main/install-from-binstall-release.sh | bash
+          binaryen_url="$(curl --fail -sSL https://github.com/@api/repos/WebAssembly/binaryen/releases/latest | node --input-type=module -e 'let s="";for await(const c of process.stdin)s+=c;console.log(JSON.parse(s).assets.find(a=>a.name.endsWith("-x86_64-linux.tar.gz")).browser_download_url)')"
+          curl --fail -sSL "$binaryen_url" -o "$PERF_ROOT/binaryen.tar.gz"
+          tar -xzf "$PERF_ROOT"/*.tar.gz --strip-components=1 -C "$PERF_ROOT/binaryen"
+          echo "$PERF_ROOT/binaryen/bin" >> "$GITHUB_PATH"
+          version="$(node resolve-wasm-bindgen.js "$PERF_ROOT/base/Cargo.lock")"
+          cargo binstall wasm-bindgen-cli --version "=$version" --root "$PERF_ROOT/abi-tools" --no-confirm --force
+          echo "$PERF_ROOT/abi-tools/bin" >> "$GITHUB_PATH"
+      - name: Build both unchanged release profiles
+        run: |
+          set -euo pipefail
+          for side in base candidate; do
+            (
+              cd "$PERF_ROOT/$side/bindings/devup-ui-wasm"
+              export CARGO_TARGET_DIR="$PERF_ROOT/$side-target"
+              cargo metadata --locked --format-version 1 > /dev/null
+              wasm-pack build --mode no-install --release --target nodejs --out-dir ./pkg --out-name index --locked
+              node script.js
+            ) 2>&1 | tee "$PERF_ROOT/reports/$side-build.log"
+          done
+          node .github/glue-performance/provenance.mjs "$PERF_ROOT" "$PERF_ROOT/reports"
+      - name: Frozen Node and Bun ABBA
+        run: node .github/glue-performance/controller.mjs "$PERF_ROOT" "$PERF_ROOT/reports"
+      - name: Preserve all samples and failures
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: glue-qualification-${{ matrix.job }}-attempt-${{ github.run_attempt }}
+          path: |
+            ${{ runner.temp }}/glue-performance/reports
+            ${{ runner.temp }}/glue-performance/base/bindings/devup-ui-wasm/pkg
+            ${{ runner.temp }}/glue-performance/candidate/bindings/devup-ui-wasm/pkg
+            .github/glue-performance
+            .github/workflows/glue-performance.yml
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 30