[MekDrop]

Summary

• Add .github/workflows/deploy.yml — deploys the Cloudflare Worker via wrangler deploy on every push to main that touches worker/. Requires CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID secrets in the repo.
• Add .github/workflows/lint-build.yml — lints and builds both workspaces on pull requests to main.

Cloudflare Pages (configure in dashboard)

• Build command: npm -w frontend run build
• Build output directory: frontend/dist/spa
• Environment variables: GITHUB_CLIENT_ID, GITLAB_CLIENT_ID, WORKER_URL

Worker secrets to set

wrangler secret put GITHUB_CLIENT_ID
wrangler secret put GITHUB_CLIENT_SECRET
wrangler secret put GH_SERVICE_PAT

Test plan

• Push a change to worker/ on main — confirm Deploy Worker workflow runs and wrangler deploy succeeds
• Open a PR — confirm Lint and Build workflow runs and passes
• Cloudflare Pages auto-deploys frontend/dist/spa on push to main

Closes #19