feat(cicd+ui): Implement Phase 1.5 pipelines and Phase 1.1 UI overhaul

.github/workflows/build.yml

@@ -0,0 +1,37 @@
+name: Build Pipeline
+
+on:
+  push:
+    branches: [ main ]
+    tags: [ 'v*' ]
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      # Install Dependencies
+      - name: Install All Dependencies
+        run: |
+          npm install
+          cd client && npm install
+          cd server && npm install
+
+      # Build
+      - name: Build Project
+        run: npm run build
+
+      # Archive Artifacts
+      - name: Upload Client Build
+        uses: actions/upload-artifact@v4
+        with:
+          name: client-dist
+          path: client/dist/

.github/workflows/quality.yml

@@ -0,0 +1,48 @@
+name: Quality Pipeline
+
+on:
+  pull_request:
+    branches: [ main, develop ]
+  workflow_dispatch:
+
+jobs:
+  quality:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      # Install Root Dependencies
+      - name: Install Root Dependencies
+        run: npm install
+
+      # Install Client Dependencies
+      - name: Install Client Dependencies
+        run: |
+          cd client
+          npm install
+
+      # Install Server Dependencies
+      - name: Install Server Dependencies
+        run: |
+          cd server
+          npm install
+
+      # Linting (Client)
+      - name: Linting (Client)
+        run: npm run lint
+        working-directory: ./client
+
+      # Testing (Unit & Integration)
+      - name: Run Tests (Client & Server)
+        run: npm test
+
+      # Security Audit
+      - name: Security Audit
+        run: npm audit --audit-level=high
+        continue-on-error: true

.gitignore

@@ -10,7 +10,10 @@ lerna-debug.log*
 node_modules
 dist
 dist-ssr
+dist-ssr
 *.local
+coverage
+.claude
 
 # Editor directories and files
 .vscode/*
@@ -25,3 +28,32 @@ dist-ssr
 
 # Local data files (user-specific, not tracked)
 data/database.json
+
+# ===========================================
+# SECURITY: Sensitive files - NEVER COMMIT
+# ===========================================
+
+# Environment files (may contain secrets)
+.env
+.env.*
+!.env.example
+*.env
+server/.env
+client/.env
+
+# Database files (contain user data)
+*.db
+*.sqlite
+*.sqlite3
+server/prisma/*.db
+
+# Secret/credential files
+*.pem
+*.key
+*.cert
+secrets/
+credentials/
+
+# Backup files that might contain sensitive data
+*.bak
+*.backup