756925bd25
- Three chained jobs: quality (lint+type-check) -> test (vitest) -> build-deploy - Uses plain docker compose build/up (not build-push-action, avoids Pitfall 4) - Triggers on push to main branch only (D-11, D-12) - No hardcoded secrets in workflow (T-06-08)