chore(penpal): add build/CI parity with mark and staged

.github/workflows/penpal-ci.yml

@@ -0,0 +1,72 @@
+name: Penpal CI
+
+on:
+  pull_request:
+    branches: [main]
+    paths:
+      - "apps/penpal/**"
+      - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
+      - "package.json"
+      - ".github/workflows/penpal-ci.yml"
+  push:
+    branches: [main]
+    paths:
+      - "apps/penpal/**"
+      - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
+      - "package.json"
+      - ".github/workflows/penpal-ci.yml"
+  workflow_dispatch:
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  check:
+    name: Check
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      # Install hermit (manages node, rust, just, go)
+      - uses: cashapp/activate-hermit@e49f5cb4dd64ff0b0b659d1d8df499595451155a # v1
+
+      # Cache Cargo dependencies
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
+        with:
+          workspaces: apps/penpal/frontend/src-tauri
+
+      # Install system dependencies for Tauri (Linux)
+      - name: Install Tauri dependencies (Linux)
+        env:
+          DEBIAN_FRONTEND: noninteractive
+        run: |
+          sudo apt-get update \
+            -o Acquire::Retries=3 \
+            -o Acquire::http::Timeout=30 \
+            -o Acquire::https::Timeout=30
+          sudo apt-get install -y --no-install-recommends \
+            -o Acquire::Retries=3 \
+            -o Acquire::http::Timeout=30 \
+            -o Acquire::https::Timeout=30 \
+            -o DPkg::Lock::Timeout=120 \
+            libwebkit2gtk-4.1-dev \
+            libappindicator3-dev \
+            librsvg2-dev \
+            patchelf
+
+      # Enable pnpm via corepack (node ships with corepack; version comes from packageManager in package.json)
+      - run: corepack enable pnpm
+
+      # Install dependencies
+      - name: Install dependencies
+        run: |
+          pnpm install --frozen-lockfile
+          cd apps/penpal/frontend/src-tauri && cargo fetch
+
+      # Run all checks via the app justfile
+      - name: Check all (fmt, lint, typecheck, test)
+        run: just -f apps/penpal/justfile ci

Cargo.toml

@@ -1,4 +1,4 @@
 [workspace]
 resolver = "2"
 members = ["crates/*"]
-exclude = ["apps/mark/src-tauri", "apps/staged/src-tauri"]
+exclude = ["apps/mark/src-tauri", "apps/staged/src-tauri", "apps/penpal/frontend/src-tauri"]