Add pull request verification workflow

[willwashburn]

Summary

• add a read-only pull_request workflow that installs dependencies, typechecks, lints, tests, and builds
• add root typecheck and lint scripts covering both workspaces
• pin Oxlint 1.76.0 without adding to the repository's existing nine npm audit findings

Root cause

The repository's only pull-request workflow uploads a Cloudflare preview. The other two workflows deploy after pushes. As a result, a PR check rollup could appear green without any typecheck, lint, test, or ordinary production build having run.

This workflow is deliberately independent of .github/workflows/preview.yml; it does not change that workflow's triggers or deploy behavior. Its permissions are read-only and checkout does not persist credentials.

Verification

• actionlint .github/workflows/verify.yml
• npm ci
• npm run typecheck
• npm run lint — 204 files
• npm test — 94/94 tests
• npm run build — 388 static pages
• npm audit --json — unchanged at 9 findings (1 low, 8 high), tracked separately in Audit and remediate 9 npm vulnerability findings #40

Gate

Draft only. Do not merge until the two-review rule is satisfied at the exact current head and cmo/chief release the gate.

---

Summary by cubic

Adds a read-only pull request workflow that runs typecheck, lint, tests, and build, so PR checks cover code quality and production builds as well as preview deploys.

• Runs on Node 22 and cancels outdated runs for the same PR.
• Adds root typecheck and lint scripts and pins oxlint to 1.76.0.
• Preserves the current root utility scripts and leaves preview workflow behavior unchanged.

^{Written for commit af49c31. Summary will update on new commits.}

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Preview deployed!

Environment	URL
Web	https://04d9822a-agentrelay-web.agent-workforce.workers.dev

This is a Cloudflare Workers preview version of this PR's build.