Offload the expensive half of GitHub Actions onto Cloudflare.

# .github/workflows/ci.yml — Action mode
- uses: fractalboxdev/flare-dispatch/actions/flare-dispatch-action@<sha>
  with:
    run: offload-test
    endpoint: ${{ vars.FLAREDISPATCH_ENDPOINT }}
    hmac-secret: ${{ secrets.FLAREDISPATCH_HMAC }}
    inputs: |
      { "repo": "${{ github.repository }}", "sha": "${{ github.sha }}", "command": "pnpm test" }

// runs/oxlint.ts, condensed — webhook mode, no workflow file
export const oxlint = defineRun({
  name: "oxlint",
  triggers: [{ event: "pull_request", actions: ["opened", "synchronize"], inputs }],
  inputs: OxlintInput,   // Schema.Struct({ repo, sha, args, version, … })
  outputs: OxlintOutput, // Schema.Struct({ exitCode, durationMs, logUri, skipped })
  limits: { maxDurationSec: 600 },

  run: (input) =>
    Effect.gen(function* () {
      const { container, dir } = yield* step("checkout", () =>
        workspace({ repo: input.repo, sha: input.sha, install: false }),
      );
      const result = yield* step("exec", () =>
        sandbox.exec({ container, cwd: dir, command: "npx --yes oxlint@1.79.0" }),
      );
      const logUri = yield* step("upload-log", () =>
        artifact.upload({ name: "oxlint.log", path: result.logPath, signedUrlTTL: "30 days" }),
      );
      if (result.exitCode !== 0) {
        return yield* Effect.fail(new AcceptanceFailed({ exitCode: result.exitCode, summaryMd: logUri }));
      }
      return { exitCode: 0, durationMs: result.durationMs, logUri, skipped: false };
    }),
});