fix: make lint and security advisory-only, run build independently

- Add continue-on-error to lint-typecheck (pre-existing lint errors
  shouldn't block CI for repos that never had linting)
- Remove build dependency on lint-typecheck so build runs in parallel
- Add continue-on-error to security audit (advisory, not blocking)
- Test and build remain blocking (must pass)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: iamzifei

sync/.github/workflows/ci.yml

@@ -23,6 +23,9 @@ concurrency:
 jobs:
   lint-typecheck:
     name: Lint & Type Check
+    # Advisory only — does not block build or other jobs.
+    # Remove continue-on-error once repo lint errors are resolved.
+    continue-on-error: true
     uses: OrrisTech/.github/.github/workflows/ci-lint-typecheck.yml@main
     secrets: inherit
 
@@ -33,12 +36,13 @@ jobs:
 
   build:
     name: Build
-    needs: [lint-typecheck]
     uses: OrrisTech/.github/.github/workflows/ci-build.yml@main
     secrets: inherit
 
   security:
     name: Security Audit
+    # Advisory only — does not block other jobs.
+    continue-on-error: true
     uses: OrrisTech/.github/.github/workflows/ci-security.yml@main
     secrets: inherit