ci: simplify PR checks and release image publishing

.github/workflows/build-runtime.yml

@@ -2,19 +2,6 @@ name: Build Runtime Image
 
 on:
   workflow_dispatch:
-  pull_request:
-    branches: [main, master]
-    types: [opened, synchronize, reopened]
-    paths:
-      - "runtime/**"
-      - ".github/workflows/build-runtime.yml"
-      - "!runtime/*.md"
-  push:
-    branches: [main, master]
-    paths:
-      - "runtime/**"
-      - ".github/workflows/build-runtime.yml"
-      - "!runtime/*.md"
 
 permissions:
   pull-requests: write

.github/workflows/ci.yml

@@ -0,0 +1,51 @@
+name: CI
+
+on:
+  pull_request:
+    branches: [main]
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  NODE_VERSION: "22.12.0"
+  PNPM_VERSION: "10.20.0"
+  NEXT_TELEMETRY_DISABLED: 1
+  SKIP_ENV_VALIDATION: 1
+
+jobs:
+  lint-test-build:
+    name: Lint, Test, Build
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: ${{ env.PNPM_VERSION }}
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Run linter
+        run: pnpm lint
+
+      - name: Run tests
+        run: pnpm test
+
+      - name: Build project
+        run: pnpm build