ci: add CI workflow and gate deployments on CI success

- Add ci.yml with lint, test, and typecheck jobs
- Update workers.yml to trigger on CI workflow completion
- Update sync.yml to trigger on CI workflow completion
- Update image.yml to trigger on CI workflow completion
- Fix pages-eo.yml secret name to match README (EDGEONE_PAGES_API_TOKEN)

Deployment workflows now only run after CI passes, preventing
broken code from being deployed to any platform.

.github/workflows/sync.yml

@@ -1,20 +1,12 @@
 name: Sync to Pages and Functions
 
 on:
-  push:
+  workflow_run:
+    workflows: ["CI"]
+    types:
+      - completed
     branches:
       - main
-    paths-ignore:
-      - "**.md"
-      - "LICENSE"
-      - ".gitignore"
-      - ".editorconfig"
-      - ".vscode/**"
-      - "docs/**"
-      - ".prettierrc*"
-      - ".eslintrc*"
-      - ".github/ISSUE_TEMPLATE/**"
-      - ".github/PULL_REQUEST_TEMPLATE/**"
   workflow_dispatch:
 
 concurrency:
@@ -27,6 +19,7 @@ jobs:
     timeout-minutes: 15
     permissions:
       contents: write
+    if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
 
     steps:
       - name: Checkout main branch
@@ -44,7 +37,7 @@ jobs:
         run: |
           mkdir -p /tmp/pages-conversion
           cp -r adapters/pages/* /tmp/pages-conversion/
-          
+
       - name: Copy source code files
         run: |
           cp -r src /tmp/pages-conversion/
@@ -98,6 +91,7 @@ jobs:
     timeout-minutes: 15
     permissions:
       contents: write
+    if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
 
     steps:
       - name: Checkout main branch