chore(build): enforce lint, type-check and dist invariants in build and CI

Add verify-dist.mjs (node --check on bundles, dev-only payload guard).
Wire lint into build.ps1 and type-check both web and bridge in pnpm build.
Drop noImplicitAny override and switch bridge to Bundler resolution.
Run CI on pull_request and push to master.

.github/workflows/build.yml

@@ -2,6 +2,9 @@ name: Build executable
 
 on:
   workflow_dispatch:
+  pull_request:
+  push:
+    branches: [master]
 
 jobs:
   build: