ci: require unit tests on pull requests

[hileix]

Summary

• add a pull request workflow that runs the unit test suite
• require the unit-test status check on protected main branch

Verification

• pnpm test
• git diff --check