[Issue #612] Add per-package ci scripts and workspace validation workflow

[bryan-thompsoncodes]

Summary

• Fixes [Security] SPIKE: Research setting up automated dependency updates #612 (partial — base layer for stacked PR)
• Time to review: 5 minutes

Changes proposed

Adds a ci script to each workspace package that runs its full validation pipeline, plus root-level shortcuts and a GitHub Action workflow:

Per-package ci scripts added to each package.json:

Package	ci script runs
@common-grants/core	checks → build → typespec
typespec-versioning-changelog	checks → build → test
@common-grants/cli	checks → build → test
@common-grants/sdk	checks → build → test
website	build → checks → test

Note: The website runs build first because Astro requires the build step to generate virtual module types (.astro/types.d.ts, astro:content, etc.) before tsc --noEmit can resolve them. This matches the existing ci-website-preview.yml workflow order.

Root package.json scripts:

• ci:core, ci:changelog-emitter, ci:cli, ci:sdk, ci:website — filter to individual packages
• ci — runs all of the above in dependency order

New workflow (.github/workflows/ci-catalog-validation.yml):

• Triggers on pnpm-workspace.yaml and pnpm-lock.yaml changes, plus workflow_dispatch
• Installs deps, runs audit, then calls each ci:* in dependency order

Context for reviewers

This addresses Billy's review feedback on PR #647:

1. Wrap inline pnpm --filter CI steps into reusable root-level scripts (pnpm ci:core, etc.)
2. Stack [Issue #612] Dependabot and catalog dependency update automation #647 on a smaller, independently testable PR

After merge, the workflow can be tested via workflow_dispatch in the Actions tab. PR #647 will be rebased on top of this branch.

[github-actions]

🚀 Website Preview Deployed!

Preview your changes at: https://cg-pr-658.billy-daly.workers.dev

This preview will be automatically deleted when the PR is closed.

[widal001]

This looks good to me! Thanks for adding this as a first step.

I had two small non-blocking comments.

[github-actions]

🗑️ Preview Cleaned Up

The preview for this PR has been automatically deleted.