feat(guides) : add safer publishing and discovery

.gitea/workflows/ci.yml

@@ -4,9 +4,6 @@ on:
   push:
     branches:
       - main
-  pull_request:
-    branches:
-      - main
 
 env:
   BASE_URL: https://guide.sudloh.com
@@ -16,8 +13,30 @@ env:
   KUBE_API_SERVER: https://100.112.189.33:6443/
 
 jobs:
+  verify:
+    name: Verify
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+      - name: Set up Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: 1.3.14
+      - name: Set up kubectl
+        uses: azure/setup-kubectl@v4
+      - name: Verify application and manifests
+        run: |
+          bun install --frozen-lockfile
+          bun run test
+          bun run typecheck
+          bun run lint
+          kubectl kustomize k8s/ >/dev/null
+
   build-and-deploy:
     name: Build immutable images and deploy
+    needs: verify
     if: >-
       gitea.event_name == 'push' &&
       gitea.ref == 'refs/heads/main' &&