Merge pull request #559 from jack-w-shaw/JUJU-6480_add_cla_check

#559

## Description

The cla check verifies that someone contributing to a Canonical project has signed the Canonical CLA agreement

## Type of change

- Maintenance work (repository related, like Github actions, or revving the Go version, etc.)

## QA steps

CLA github action check runs and is successful

.github/workflows/cla.yml

@@ -0,0 +1,16 @@
+name: "CLA check"
+on: [pull_request, workflow_dispatch]
+
+permissions:
+  contents: read
+
+jobs:
+  cla-check:
+    permissions:
+      pull-requests: write  # for canonical/has-signed-canonical-cla to create & update comments
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check if CLA signed
+        uses: canonical/[email protected]
+        with:
+          accept-existing-contributors: true