- Merge test + release/build workflows into single ci.yaml
- Add explicit job dependencies (build-push needs test)
- Test runs on all PRs + main pushes
- Build/release runs on main/tags only (after test passes)
- Proper Node.js install before actions/checkout@v4
- Remove docker socket-breaking container overrides
rock