[ci] web workflow: lint + typecheck + build + Playwright E2E on PR

[ozpool]

Context

Pre-merge gate for frontend.

Ref: PRISM_PRD_v1.0.html §Day 6.

Scope

In scope:

• .github/workflows/ci.yml (web job)
• pnpm install with cache
• lint + typecheck + build
• Playwright E2E job

Out of scope:

• Anything not listed above.

Acceptance Criteria

• Status check required on main
• Pinned toolchain versions (Node / Foundry / pnpm)
• No secrets in workflows or committed files
• Pre-merge gate as applicable (forge test, Slither, Aderyn, typecheck, lint)
• Status checks required on default branch where relevant
• Rollback path documented

Dependencies

• Blocks: [test] Playwright E2E: wallet-connect → deposit → observe rebalance → withdraw happy path #67, [test] Playwright E2E: error paths — wrong network, insufficient balance, tx rejection #68
• Blocked by: [contracts] Monorepo + Foundry workspace: pnpm + Turborepo + foundry.toml (via_ir, cancun) #15, [frontend] Monorepo scaffold: apps/web with Next.js 14 App Router (no src-dir) + Tailwind #43

References

• N/A

Estimate

M

[ozpool]

PR opened — typecheck + lint + Next build, plus a Playwright job that no-ops until #67 lands.