ci: build on PRs and shrink full minified bundle to ≤1000 B

[ikrishg]

Related Issue

Closes: #396
Closes: #397

Describe the changes you've made

Follow-up to the open-issue plan after the 3.0.0 audit merge:

• CI (ci: run pnpm build and bundlewatch on pull requests #396): add .github/workflows/ci.yml on pull_request and push to main — pnpm install --frozen-lockfile then pnpm run build (Lightning CSS + aliases + bundlewatch).
• Size (perf: shrink full minified bundle to ≤1000 B Brotli #397): trim the :root font stack in src/components/global.css to system-ui, sans-serif + emoji families. dist/index.min.css is now 951 B Brotli (was 1008 B). Bundlewatch max for that file is 1000B. Docs reference snippet updated to match.

Hygiene (done outside this PR): closed stale duplicates #375–#380 as duplicates of the already-shipped #381–#386.

How has this been tested?

• pnpm run build locally — all bundlewatch checks PASS (dist/index.min.css: 951B < 1000B).

Checklist

• I have performed a self-review of my own code.
• I have commented on my code, particularly wherever it was hard to understand.
• I have made corresponding changes to the documentation.
• I have followed the code style of the project
• I have tested my code, and it works without errors

Additional Information

Plan: Reseter 3.0 follow-ups

Code of Conduct

• I agree to follow this project's Code of Conduct

  

Confidence Score: 5/5

The PR appears safe to merge, with both previous findings fixed and no new issues found.

Summary

Adds CI builds for pull requests and pushes to main, shortens the root font stack, and sets the Brotli limit for dist/index.min.css to exactly 1000 bytes.

• Source, generated CSS, and the reference snippet use the same shorter font stack.
• Both previous findings are fixed: the size limit is "1000B", and all three actions use full commit SHAs.
• Since the previous review, only an explanatory comment was added. No new issues were found.

_{Reviews (3) · Last reviewed commit: "chore: acknowledge review fixes for merg..." · Reviewed by Greptile}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 5a0fdb40-f5ef-4af5-baa6-0f24428b4dc9

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Approved. Cursor Bugbot was not running on this PR after the first check poll, so that signal was skipped; remaining signals and approval policy do not require human review. No prior approval from this automation needed to be dismissed.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}

[cursor]

Approved. Cursor Bugbot was not present after the first check poll, so that signal was skipped; remaining signals and approval policy do not require human review. This automation has no current approval to keep or dismiss.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}

[cursor]

Approved. Cursor Bugbot was not present after the first check poll, so that signal was skipped; remaining signals and approval policy do not require human review. This automation has no current approval to keep or dismiss.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}