[TheGreatAxios]

Closes CL-11852 (https://linear.app/abklabs/issue/CL-11852/run-each-ci-check-only-when-the-paths-it-covers-change).

Changes

ci.yml is split into one workflow per check, so each can carry GitHub's own paths filter. Job names and scripts are unchanged.

Check	Runs on a pull request touching
format:check	anything (it formats docs too)
lint, typecheck	apps, packages, workflows, test, scripts, vendor (lint also .oxlintrc.json)
test	apps, packages, workflows, test/integration, vendor
e2e	apps/hub, packages, workflows, test/e2e, vendor
pins:verify	any package.json, its script
vendor:verify	vendor, its script

• Every check also runs when the lockfile, patches/ (dependency patches), the root package.json, tsconfig.json or anything under .github changes, which includes this pull request.
• Pushes to main, the merge queue and manual runs run everything.
• The README badge now points at the test workflow.

Verification

• This pull request touches .github, so all seven checks run on it.
• An independent review found patches/ missing, which would have let a dependency-patch change skip the build checks; it is now a shared root.

[linear-code]

CL-11852

[corbits-triage]

Triage: Pass

No changes needed from you. A maintainer will review this pull request.

Notes:

• changes sensitive paths: ci: .github/workflows/e2e.yml, ci: .github/workflows/format.yml, ci: .github/workflows/lint.yml, ci: .github/workflows/pins.yml, ci: .github/workflows/test.yml, and 2 more

Triage will approve.