ci: add fast validation lanes

[belguinan]

Description

Adds fast-fail CI lanes so lightweight validation and security checks run before the heavier build job. The workflow now surfaces failures early for secret scanning, workflow audit, dependency audit, linting, type-checking, and smoke build validation.

The web package also exposes explicit typecheck and smoke scripts so the fast lanes can be run locally and independently in CI.

Related issue

Closes #2

Type of change

• feat — new feature
• fix — bug fix
• docs — documentation only
• refactor / perf / style
• ci / build / chore

Screenshots (for UI changes)

Not applicable; this PR only changes CI behavior.

Checklist

• My PR is focused on a single concern
• npm run lint and npm run build pass locally (in web/)
• I have self-reviewed my changes

AI assistance disclosure

• This PR was partly or fully AI-assisted, and I have reviewed and understand every change

Local validation

• npm run lint
• npm run typecheck
• npm run smoke
• npm audit --audit-level=moderate
• npm run build
• YAML parse for .github/workflows/ci.yml
• Docker actionlint for .github/workflows/ci.yml
• Docker Gitleaks scan with no leaks found

[pr-elhajji]

thank you for this contribution,
it will be checked soon

[pr-elhajji]

Thanks for the awesome PR! 🚀

The conditional preflight logic and security fast-lane are spot on. This is going to save us so much build time and CI credits.

Please resolve conflicts before merge!
Thanks again for your valuable contribution to the project! 🙌

[belguinan]

Thanks for the awesome PR! 🚀

The conditional preflight logic and security fast-lane are spot on. This is going to save us so much build time and CI credits.

Please resolve conflicts before merge! Thanks again for your valuable contribution to the project! 🙌

Glad to do it, thank you. Once the project structure is agreed upon, we can start collaborating on it.