feat: add OIDC + magic link authentication and RBAC authorization #27

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	jobs:
	ci:
	name: CI
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v6

	- name: Set up Node.js
	uses: actions/setup-node@v6
	with:
	node-version: "24"

	- name: Install pnpm
	uses: pnpm/action-setup@v4

	- name: Get pnpm store directory
	id: pnpm-cache
	run: echo "store=$(pnpm store path)" >> "$GITHUB_OUTPUT"

	- name: Cache pnpm store
	uses: actions/cache@v5
	with:
	path: ${{ steps.pnpm-cache.outputs.store }}
	key: ${{ runner.os }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }}
	restore-keys: \|
	${{ runner.os }}-pnpm-

	- name: Install dependencies
	run: pnpm install

	- name: Format check
	run: pnpm format:check

	- name: Generate Prisma client
	run: pnpm db:generate

	- name: Type check
	run: pnpm typecheck

	- name: Lint
	run: pnpm lint

	- name: Dead code scan (knip)
	continue-on-error: true
	run: pnpm deadcode

	- name: Unit tests
	run: pnpm test

	- name: Production build
	run: pnpm build

Provide feedback