Add cira-family to public-resolvers.md; add CI check for this

.github/workflows/prcheck.sh

@@ -1,5 +1,15 @@
 #! /bin/sh
 
+for aux in v3/parental-control.md v3/opennic.md; do
+    grep '^## ' "$aux" | while read entry; do
+        if ! grep -Fq "$entry" v3/public-resolvers.md; then
+            echo "Present in [$aux] but not in public-resolvers.md:"
+            echo "$entry"
+            exit 1
+        fi
+    done
+done
+
 curl -qL https://github.com/jedisct1/dnscrypt-proxy/releases/download/2.0.45/dnscrypt-proxy-linux_x86_64-2.0.45.tar.gz | tar xzvf -
 cd linux-x86_64 || exit 1
 

v3/public-resolvers.md

@@ -331,6 +331,15 @@ If you are within India, this might be a nice DNS server to use.
 sdns://AQQAAAAAAAAAEjEzOS41OS40OC4yMjI6NDQzNCAFOt_yxaMpFtga2IpneSwwK6rV0oAyleham9IvhoceEBsyLmRuc2NyeXB0LWNlcnQuY2FwdG5lbW8uaW4
 
 
+## cira-family
+
+CIRA DoH resolvers, blocking trackers, malware, phishing and pornography.
+Operated by the .CA registry. Built by Canadians for Canadians.
+https://www.cira.ca/fr/cybersecurity-services/canadian-shield
+
+sdns://AgEAAAAAAAAAACA_4zhjTgUQYz3kU8o1CxXOwzmz3Li6nyot0k0QqDj-6x1mYW1pbHkuY2FuYWRpYW5zaGllbGQuY2lyYS5jYQovZG5zLXF1ZXJ5
+
+
 ## circl-doh
 
 DoH server operated by CIRCL, Computer Incident Response Center Luxembourg.

v3/public-resolvers.md.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from minisign secret key
-RWQf6LRCGA9i5wmiBPT1gwcZIqaf61m7/KP5/tI7mSw+14lQpJgzdEeCTt6OSHzqL3gmK9s5hOXqq79LaiTf7RmwU4Q6NYsNOw4=
-trusted comment: timestamp:1612251762	file:public-resolvers.md
-jfbASprAbTr6h8Q2/MIQQcM3dsTGEumAJzjPUL1sb6UupsTqd+NDk8IOzYF28xffuoTc/nf1LLjr72nJX66SAQ==
+RWQf6LRCGA9i57qAmMWDIDDKNOdscKei0Ki1tIZDVmfz5Jj+IHLsTpnYIawJ61z1tlg6yHz0IKbmczk+Y8qOhj/hZZX/T677BQc=
+trusted comment: timestamp:1612252815	file:public-resolvers.md
+e3pAJA1cJyLgCdrJrv4lINUY3CF9iJovVWZ2zklREKoY4mUidAc9ehldsU4apCne90PaNt+ZqjYjD/FUeoMsCQ==