- Merge test + release/build workflows into single ci.yaml - Add explicit job dependencies (build-push needs test) - Test runs on all PRs + main pushes - Build/release runs on main/tags only (after test passes) - Proper Node.js install before actions/checkout@v4 - Remove docker socket-breaking container overrides