GitHub Actions Integration

# .github/workflows/pr-checks.yml
name: PR Checks
on:
  pull_request:
    branches: [main]
 
jobs:
  quality:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: "24.18.0"
          cache: npm
      - run: npm ci
      - run: npm run typecheck
      - run: npm run lint
      - run: npm test -- --ci
      - run: npm audit --audit-level=high

# .github/workflows/release.yml
name: Release
on:
  push:
    tags: ["v*"]
 
jobs:
  build-and-push:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: "24.18.0"
          cache: npm
      - run: npm ci
      - run: npm run build
      - run: npm test -- --ci
      # docker build + push to registry

<!-- .github/pull_request_template.md -->
## Summary
 
## Ticket
<!-- API-___ -->
 
## API / DB checklist
- [ ] OpenAPI or route list updated
- [ ] Migration included (or N/A)
- [ ] Rollback plan documented
- [ ] Worker compatibility checked (if event schema changed)
 
## CI
- [ ] `quality` check green locally: `npm ci && npm run typecheck && npm test`

{
  "scripts": {
    "typecheck": "tsc --noEmit",
    "lint": "eslint src test",
    "test": "node --import tsx --test test/**/*.test.ts",
    "build": "tsc -p tsconfig.build.json"
  }
}

# .husky/pre-push
npm run typecheck && npm test

on:
  pull_request:
    paths:
      - "services/orders-api/**"
      - "package-lock.json"
 
defaults:
  run:
    working-directory: services/orders-api

  db-lint:
    runs-on: ubuntu-latest
    services:
      postgres:
        image: postgres:16
        env:
          POSTGRES_PASSWORD: postgres
    steps:
      - uses: actions/checkout@v4
      - run: npm ci
      - run: npm run db:migrate
        env:
          DATABASE_URL: postgres://postgres:postgres@localhost:5432/test

Settings → Branches → main → Require status checks:
  ✓ quality
  ✓ db-lint (if migrations in PR)