Added CI/CD workflow

.forgejo/workflows/ci.yml

@@ -0,0 +1,34 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  ci:
+    # This label must point to an isolated runner that has Node.js, Git,
+    # the Docker CLI, and access to a Docker/Podman daemon.
+    runs-on: docker-build
+
+    steps:
+      - name: Check out repository
+        uses: https://data.forgejo.org/actions/checkout@v6
+
+      - name: Set up Node.js
+        uses: https://data.forgejo.org/actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Typecheck
+        run: npm run typecheck
+
+      - name: Build and test
+        run: npm test
+
+      - name: Build container image
+        run: docker build --tag webstack-author:ci .

Dockerfile

@@ -6,8 +6,8 @@ WORKDIR /app
 # Copy dependency manifests
 COPY package*.json ./
 
-# Install all dependencies
+# Install exactly the dependency versions recorded in package-lock.json
-RUN npm install
+RUN npm ci
 
 # Copy full application codebase
 COPY . .
@@ -23,8 +23,8 @@ WORKDIR /app
 # Copy configuration files
 COPY package*.json ./
 
-# Install only production dependencies (Express, dotenv, @google/genai)
+# Install exactly the locked production dependencies
-RUN npm install --omit=dev
+RUN npm ci --omit=dev
 
 # Copy compiled build resources from builder stage
 COPY --from=builder /app/dist ./dist