chore: simplify and scope CI checks

[ComputelessComputer]

Summary

• Simplify web CI to shared UI build and web typecheck.
• Remove unused Netlify preview wait and no-op web test plumbing.
• Scope web, desktop, lint, format, database, and workflow-security CI triggers to relevant changed paths.

---

Note

Medium Risk
CI behavior changes (path filters and removed web E2E/preview plumbing) can lead to missed checks or reduced coverage if the trigger paths are incomplete.

Overview
Tightens CI workflow triggers by adding paths filters across database, desktop, lint, fmt, and zizmor workflows so they run only when relevant files (or the workflow itself) change.

Simplifies web_ci to only build the shared UI package and run web typechecking, removing the Netlify preview wait composite action and associated preview/test setup.

^{Reviewed by Cursor Bugbot for commit b403bfc. Bugbot is set up for automated code reviews on this repo. Configure here.}

[netlify]

✅ Deploy Preview for hyprnote canceled.

Name	Link
🔨 Latest commit	b403bfc
🔍 Latest deploy log	https://app.netlify.com/projects/hyprnote/deploys/69f704bd5e67a70009054dbb

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit b403bfc. Configure here.}

[cursor]

Format CI paths filter missing Python and Dockerfile patterns

Low Severity

The new paths filter in fmt.yaml doesn't include **/*.py or **/Dockerfile*, but dprint.json configures both the ruff plugin (for Python) and the dockerfile plugin. The repo contains several .py files (e.g. in scripts/) and Dockerfile files (e.g. in apps/api/, apps/stripe/). A PR that exclusively modifies these file types won't trigger the format CI at all, allowing formatting violations to be merged.

 

^{Reviewed by Cursor Bugbot for commit b403bfc. Configure here.}