build: add Bazel BUILD file

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

BUILD.bazel

@@ -0,0 +1,39 @@
+load("@rules_shell//shell:sh_binary.bzl", "sh_binary")
+
+# Each operational script exposed as a runnable Bazel target
+# (e.g. `bazel run //riotsecure:setup`).
+
+sh_binary(
+    name = "setup",
+    srcs = ["setup.sh"],
+)
+
+sh_binary(
+    name = "setup_ollama",
+    srcs = ["setup_ollama.sh"],
+)
+
+sh_binary(
+    name = "setup_onyx",
+    srcs = ["setup_onyx.sh"],
+)
+
+sh_binary(
+    name = "check_status",
+    srcs = ["check-status.sh"],
+)
+
+sh_binary(
+    name = "cleanup",
+    srcs = ["cleanup.sh"],
+)
+
+sh_binary(
+    name = "fetch_content",
+    srcs = ["fetchContent.sh"],
+)
+
+sh_binary(
+    name = "update_models",
+    srcs = ["updateModels.sh"],
+)