Migrate frontend/cordova to pnpm 11 + add CI

.github/workflows/cordova-ci.yml

@@ -0,0 +1,56 @@
+name: frontend/cordova CI
+
+on:
+  push:
+    branches: [master]
+    paths:
+      - frontend/cordova/**
+      - .github/workflows/cordova-ci.yml
+  pull_request:
+    paths:
+      - frontend/cordova/**
+      - .github/workflows/cordova-ci.yml
+
+concurrency:
+  group: cordova-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  ci:
+    name: install / lint / test / build
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: frontend/cordova
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 11.1.1
+          run_install: false
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: pnpm
+          cache-dependency-path: frontend/cordova/pnpm-lock.yaml
+
+      - name: Install dependencies
+        # preinstall runs `pnpm audit && pnpm audit signatures`.
+        # That's the main thing CI validates for this project — the
+        # actual `cordova build ios` step requires Xcode (macOS).
+        run: pnpm install --frozen-lockfile
+
+      - name: Lint
+        run: pnpm run lint
+
+      - name: Test
+        run: pnpm run test
+
+      - name: Build
+        run: pnpm run build

frontend/cordova/.gitignore

@@ -21,6 +21,10 @@
 # Generated by package manager
 node_modules/
 
+# Block npm/yarn lockfiles — this project is pnpm-only
+package-lock.json
+yarn.lock
+
 # Generated by Cordova
 /plugins/
 /platforms/