ci: consolidate workflows, gate deploy on quality checks

Author: ASDAlexey

.github/workflows/ci.yml

@@ -1,11 +1,16 @@
-name: CI
+name: CI / Deploy
 
 on:
   push:
     branches: [main]
   pull_request:
   workflow_dispatch:
 
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
 concurrency:
   group: ci-${{ github.ref }}
   cancel-in-progress: true
@@ -31,3 +36,39 @@ jobs:
 
       - name: Unit tests + 100% coverage
         run: bun run test:coverage
+
+  build:
+    needs: quality
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: 1.3.14
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Build (EN + RU, prerendered)
+        run: bun run build
+
+      - name: Assemble site root (redirect, robots, sitemap, og-image)
+        run: node scripts/assemble-dist.mjs
+
+      - name: Upload Pages artifact
+        uses: actions/upload-pages-artifact@v3
+        with:
+          path: dist/ngportfolio/browser
+
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4