ci: cover worker and deployment gates

.github/workflows/quality.yml

@@ -47,6 +47,18 @@ jobs:
           DATABASE_URL=postgresql://pokemon_inventory:ci-password@localhost:5433/pokemon_inventory_test npm run db:migrate
       - run: npx playwright install --with-deps chromium
       - run: npm test
+      - name: Run worker tests
+        run: npm run test --workspace=@pokemon-inventory/worker
+      - name: Audit production dependencies
+        run: npm audit --omit=dev
+      - name: Validate deployment scripts
+        run: |
+          sh -n scripts/*.sh
+          sh scripts/deployment-health-wait.test.sh
+          sh scripts/verify-postgres-backup.test.sh
+          sh scripts/restore-postgres.test.sh
+          sh scripts/restore-image-storage.test.sh
+          sh scripts/smoke-production.test.sh
       - name: Run integration tests
         env:
           TEST_DATABASE_URL: postgresql://pokemon_inventory:ci-password@localhost:5433/pokemon_inventory_test

docs/IMPLEMENTATION-STATUS.md

@@ -130,6 +130,8 @@ Complete production configuration and operational maturity around the implemente
 
 Acceptance criteria: production provider credentials are secret-managed, migrations and backups are exercised in the target environment, and CI runs integration, authenticated E2E, web, build, Storybook build, and Storybook interaction/accessibility gates.
 
+CI also runs the worker suite, production dependency audit, and deployment/restore script contract checks.
+
 ## Overall Roadmap
 
 Work through one bounded vertical slice at a time. The linked documentation remains authoritative when this roadmap is less detailed.