Merge remote-tracking branch 'origin/main' into backend-tests

# Conflicts:
#	.github/workflows/ci.yml
#	README.md

Author: ambv

.github/workflows/ci.yml

@@ -71,3 +71,20 @@ jobs:
         run: |
           pip install -r requirements-dev.txt
           python -m pytest tests/ -v --cov=app --cov-report=term-missing
+
+  frontend-lint:
+    name: Frontend Lint & Typecheck
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: frontend
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+      - run: npm ci
+      - run: npm run lint
+      - run: npm run typecheck

README.md

@@ -57,6 +57,8 @@ Requests go through `httpx.AsyncClient` with FastAPI's ASGI transport,
 so the full request/response cycle (middleware, dependency injection,
 validation) is exercised without a running server.
 
+Both checks run in CI on pushes to `main` and on pull requests.
+
 ### Populating Mock Data
 ```bash
 docker compose -f docker-compose.dev.yml exec backend python scripts/populate_db.py

docker-README.md

@@ -152,6 +152,16 @@ ADMIN_GITHUB_TEAMS=memory-python-org
 
 **Note:** Development compose file uses port 9002 for frontend, production uses 3000.
 
+### Linting & Type Checking
+
+```bash
+# ESLint (must pass with zero errors)
+docker compose -f docker-compose.dev.yml exec frontend npm run lint
+
+# TypeScript type checking
+docker compose -f docker-compose.dev.yml exec frontend npm run typecheck
+```
+
 ### Accessing the Database
 
 ```bash