feat: the hub as a server: React Router on Express, SQLite, Redis, sign-in, live stream

.github/CODEOWNERS

@@ -1,2 +1 @@
 /.github/ @project-graphite/maintainers
-/site/src/data/ @project-graphite/maintainers

.github/workflows/pr.yml → .github/workflows/pipeline.yml

@@ -1,17 +1,32 @@
-name: PR
+name: Pipeline
 
-on: pull_request
+on:
+  push:
+    branches: [main]
+  pull_request:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 
 permissions:
   contents: read
 
 jobs:
-  build:
-    name: Build
+  pipeline:
+    name: Pipeline
+    permissions:
+      contents: read
+      packages: write
+      issues: write
+      pull-requests: write
+    uses: project-graphite/actions/.github/workflows/reusable-pipeline.yml@main
+    with:
+      changelog: false
+    secrets: inherit
+
+  budget:
+    name: Types, format and bundle size
     runs-on: ubuntu-latest
     defaults:
       run:
@@ -24,22 +39,7 @@ jobs:
           cache: npm
           cache-dependency-path: site/package-lock.json
       - run: npm ci
-      - run: npm run lint
       - run: npm run format:check
-      - run: npm test
+      - run: npm run typecheck
       - run: npm run build
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-      - run: node scripts/check-routes.mjs
-
-  secrets:
-    name: Secrets
-    uses: project-graphite/actions/.github/workflows/reusable-gitleaks.yml@main
-
-  conventions:
-    name: Conventions
-    permissions:
-      contents: read
-      issues: write
-      pull-requests: write
-    uses: project-graphite/actions/.github/workflows/reusable-pr-checks.yml@main
+      - run: npm run size

.gitignore

@@ -1,6 +1,7 @@
 node_modules/
-dist/
-dist-ssr/
+build/
+.react-router/
+site/data/
+.env
 *.tsbuildinfo
 .DS_Store
-site/src/data/changelog.json