ci: typecheck, lint, test, build on PRs and dev/main pushes

Forgejo Actions workflow (Bun 1.3.14). Guards against regressions reaching main
(and prod via autodeploy).

.forgejo/workflows/ci.yml

@@ -0,0 +1,35 @@
+name: CI
+
+# Vérifie chaque PR (et les push sur dev/main) : typecheck + lint + tests + build.
+# Nécessite un runner Forgejo Actions enregistré (label ubuntu-latest).
+on:
+  pull_request:
+  push:
+    branches: [main, dev]
+
+jobs:
+  ci:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: 1.3.14
+
+      - name: Install
+        run: bun install --frozen-lockfile
+
+      - name: Typecheck
+        run: bun run typecheck
+
+      - name: Lint
+        run: bun run lint
+
+      - name: Test
+        run: bun run test
+
+      - name: Build
+        run: bun run build