Shrink the server to a lean v5: fewer services, stateless core, own watch process

.github/workflows/ci.yml

@@ -2,9 +2,7 @@ name: CI/CD Pipeline
 
 on:
   push:
-    branches: [main, develop]
   pull_request:
-    branches: [main, develop]
   workflow_dispatch:
 
 jobs:
@@ -13,9 +11,10 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     strategy:
+      fail-fast: false
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]
-        node: [18, 20, 22]
+        node: [20, 22]
 
     steps:
       - name: Checkout code
@@ -69,7 +68,14 @@ jobs:
           fi
         continue-on-error: true
 
-      - name: Run tests
+      - name: Run security tests & static analysis
+        run: npm run test:security
+
+      - name: Run security fuzzing & TOCTOU suite (Ubuntu only)
+        if: matrix.os == 'ubuntu-latest' && matrix.node == '20'
+        run: npm run test:security:gates
+
+      - name: Run test suite
         run: npm test
         env:
           CI: true