f1d0ce4c75
Tests existed inside deploy.yml but only ran on push to main, so PRs got no validation signal. This adds a standalone ci.yml mirroring the same 3 jobs, triggered on both pull_request and push to main. The in-deploy validate job stays for belt-and-suspenders; remove it in a follow-up if desired. Agent-Session: cowork-ci-parity-20260414