[T4-2] CI

[liangricky7]

Blocked by: T4-1 (#20) · Blocks: —

• A GitHub Actions workflow runs on every pull request: install (npm ci), build both apps, start PostgreSQL 17, migrate, test
• Uses Node 24, matching production
• Set as a required check, so red blocks merge

---

Source: docs/backend-tickets.md