fix: address review feedback — remove dead code, add tests, harden on… #231

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-node@v4
	with:
	node-version: 22
	cache: npm
	- run: npm ci
	- run: npm run build
	- run: npm run typecheck
	- run: npm test

	security:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- uses: actions/setup-node@v4
	with:
	node-version: 22
	cache: npm
	- run: npm ci

	# Secret detection
	- uses: gitleaks/gitleaks-action@v2
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	# Dependency audit — fail on high+ severity
	- name: npm audit
	run: npm audit --audit-level=high

	codeql:
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	steps:
	- uses: actions/checkout@v4
	- uses: github/codeql-action/init@v3
	with:
	languages: javascript-typescript
	- uses: github/codeql-action/analyze@v3

	dependency-review:
	runs-on: ubuntu-latest
	if: github.event_name == 'pull_request'
	steps:
	- uses: actions/checkout@v4
	- uses: actions/dependency-review-action@v4
	with:
	fail-on-severity: high

Provide feedback