Replaces ci.sh, provides add'l static analysis (which isn't yet enabled in CI since the code doesn't yet pass them all)