Consolidate CI/CD: tests, typecheck, preview + prod deploys

[stevie86]

Goal

• Single PR workflow: lint, typecheck, tests, preview deploy.
• Single push-to-main workflow: production deploy.

Acceptance Criteria

• Required checks green before merge.
• No duplicate deploys on PR or main.