CI: run npm run test on pull requests in existing workflow

[Copilot]

This updates the existing CI workflow to execute the unit test suite for new pull requests. The workflow now explicitly covers npm run test as requested.

• What changed

  • Added a new unit-tests job in .github/workflows/ci.yml.
  • Scoped the job to PR events only:
    • if: github.event_name == 'pull_request'
  • Configured the job to:
    • checkout the repo
    • setup Node with npm cache
    • install dependencies via npm ci --no-audit --no-fund
    • run tests via npm run test

• Security hardening in workflow

  • Set explicit least-privilege token permissions for the new job:
    • permissions: contents: read

• Job shape

  unit-tests:
    name: Unit Tests (On PR Only)
    runs-on: ubuntu-latest
    permissions:
      contents: read
    if: github.event_name == 'pull_request'
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-node@v7
      - run: npm ci --no-audit --no-fund
      - run: npm run test

• Fixes Run unit tests on new pull requests #2695

[greptile-apps]

Greptile Summary

This PR adds a pull-request-only unit-test job to the existing CI workflow and hardens workflow dependencies by pinning the relevant actions to commit SHAs.

• Runs npm ci --no-audit --no-fund and npm run test for pull requests.
• Grants the unit-test job read-only repository access.
• Pins checkout, setup-node, and setup-biome action references.
• Limits push-triggered workflow runs to main.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
.github/workflows/ci.yml	Adds the PR unit-test job and pins the action references, fully resolving the previously reported mutable-version concern.

_{Reviews (2): Last reviewed commit: "Update ci.yml" | Re-trigger Greptile}

[UnschooledGamer]

@greptile review again.