CI: run npm run test on pull requests in existing workflow (Acode-Foundation#2697)

* Initial plan

* Add PR-only unit test job to CI workflow

Co-authored-by: UnschooledGamer <76094069+UnschooledGamer@users.noreply.github.com>

* Set read-only token permissions for unit test job

Co-authored-by: UnschooledGamer <76094069+UnschooledGamer@users.noreply.github.com>

* Update CI workflow to trigger on main branch only

Restrict CI workflow to run on pushes to the main branch.

* Update ci.yml

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: UnschooledGamer <76094069+UnschooledGamer@users.noreply.github.com>

Author: Copilot

.github/workflows/ci.yml

@@ -2,7 +2,11 @@ name: CI
 
 on:
   push:
+    branches:
+      - main
   pull_request:
+    branches:
+      - '**'
   merge_group:
 
 jobs:
@@ -13,7 +17,7 @@ jobs:
 
     steps:
       - name: Checkout Actions Repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Check spelling
         uses: crate-ci/typos@master
@@ -27,14 +31,37 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Setup Biome
-        uses: biomejs/setup-biome@v2
+        uses: biomejs/setup-biome@4c91541eaada48f67d7dbd7833600ce162b68f51 # v2.7.1
 
       - name: Run Biome
         run: biome ci .
 
+  unit-tests:
+    name: Unit Tests (On PR Only)
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    if: github.event_name == 'pull_request'
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Use Node.js
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          cache: npm
+          cache-dependency-path: '**/package-lock.json'
+
+      - name: Install dependencies
+        run: npm ci --no-audit --no-fund
+
+      - name: Run unit tests
+        run: npm run test
+
   translation-check:
     name: Translation Check (On PR Only)
     timeout-minutes: 5
@@ -45,9 +72,9 @@ jobs:
     if: github.event_name == 'pull_request'
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Use Node.js
-        uses: actions/setup-node@v7
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           cache: npm
           cache-dependency-path: '**/package-lock.json'