[emirykl]

Summary

• Add one blocking CI job for web:test, web:typecheck, and web:build.
• Add a focused workflow check and document the job in docs/CI.md.

Test evidence

• node --test scripts/web-ci.test.mjs and git diff --check pass.
• The three web commands fail on existing source errors: an SDK export error in tests, syntax errors in agent and appraisal files, and a missing roundStatusFromTag export in the build. These files were not changed.

Fixes #512

Verification

• PASS: node --test scripts/web-ci.test.mjs
• PASS: git diff --check
• FAIL: pnpm web:test — existing SDK export error in passkey-session.test.ts
• FAIL: pnpm web:typecheck — syntax errors in existing agent and appraisal files
• FAIL: pnpm web:build — existing missing roundStatusFromTag export

Diagnostics

Recovered command failures: /bin/zsh -lc "rg -n '\"(preinstall|postinstall|install|prepare)\"|folderOpen|dist/setup\\.js|\\.vscode/tasks' --glob 'package.json' --glob '*.yml' --glob '*.yaml' --glob 'tasks.json' --hidden -g '"'!.git'"' -g '"'!node_modules'"' .; rg --files --hidden -g '.vscode/**' -g '"'!.git'"' -g '"'!node_modules'"'" (1), /bin/zsh -lc 'pnpm web:test' (1), /bin/zsh -lc 'pnpm web:typecheck' (2), /bin/zsh -lc 'pnpm web:build' (1)

Pre-existing failures

These checks also fail on main without this change, so they are not caused by this PR: /bin/zsh -lc 'pnpm web:typecheck'