Feat/docker lambda build #60

	name: CI

	on:
	pull_request:
	branches: [main]
	push:
	branches: [main]

	jobs:
	checks:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-node@v4
	with:
	node-version: 20
	cache: 'npm'
	cache-dependency-path: \|
	package-lock.json
	frontend/package-lock.json
	infra/package-lock.json

	# Install dependencies for all packages
	- name: Install root deps
	run: npm ci

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: '>=1.21.0'

	- name: Set up uv
	uses: astral-sh/setup-uv@v5
	with:
	enable-cache: true
	cache-dependency-glob: 'backend/python/requirements.txt'

	- name: Install Python deps
	run: cd backend/python && uv venv && uv pip install -r requirements.txt

	- name: Install frontend deps
	run: cd frontend && npm ci

	- name: Install infra deps
	run: cd infra && npm ci

	# Run checks
	- name: Check formatting
	run: npm run format:check

	- name: Lint
	run: npm run lint

	- name: Synth CDK
	run: cd infra && npx cdk synth
	env:
	CLERK_ISSUER_URL: https://dummy.clerk.accounts.dev

	- name: Build frontend
	run: cd frontend && npm run build
	env:
	# Note: Clerk SDK strictly validates that this key is base64-encoded and matches their regex format, specifically requiring a valid `.clerk.accounts.dev` domain suffix.
	# This is completely FAKE and safe to commit. It translates to: `fake-key-for-ci-builds.clerk.accounts.dev$`
	NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY: pk_test_ZmFrZS1rZXktZm9yLWNpLWJ1aWxkcy5jbGVyay5hY2NvdW50cy5kZXYk
	NEXT_PUBLIC_API_URL: https://api.dummy.com

Provide feedback