ci: build the workspace before typecheck - consumers resolve @coreci/* types from dist

.gitea/workflows/ci.yml

@@ -82,6 +82,12 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+      # Consumers resolve @coreci/db and @coreci/secrets through their
+      # published dist/*.d.ts, so the workspace must be built (pnpm -r build
+      # runs it in dependency order) before typecheck and before the tests.
+      - name: Build (workspace packages - dist for the type declarations)
+        run: pnpm -r build
+
       - name: Typecheck
         run: pnpm typecheck
 
@@ -185,6 +191,12 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+      # Consumers resolve @coreci/db and @coreci/secrets through their
+      # published dist/*.d.ts, so the workspace must be built (pnpm -r build
+      # runs it in dependency order) before typecheck and before the tests.
+      - name: Build (workspace packages - dist for the type declarations)
+        run: pnpm -r build
+
       - name: Install the postgres client (the runner image carries no psql)
         run: |
           apt-get update -qq && apt-get install -y -qq postgresql-client