Add policy engine and human-in-the-loop approvals #2

	name: CI

	on:
	push:
	branches: [main]
	pull_request:

	jobs:
	backend:
	name: Backend (lint + type + test)
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: apps/api
	steps:
	- uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.11"
	cache: pip

	- name: Install dependencies
	run: python -m pip install -e ".[dev]"

	- name: Ruff (lint)
	run: ruff check legate tests

	- name: Black (format check)
	run: black --check legate tests

	- name: Mypy (types)
	run: mypy legate

	- name: Pytest
	run: python -m pytest -q --cov=legate --cov-report=term-missing

	frontend:
	name: Frontend (lint + test)
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: apps/web
	steps:
	- uses: actions/checkout@v4

	- name: Set up Node
	uses: actions/setup-node@v4
	with:
	node-version: "20"
	cache: npm
	cache-dependency-path: apps/web/package-lock.json

	- name: Install dependencies
	run: npm ci \|\| npm install

	- name: Lint
	run: npm run lint --if-present

	- name: Test
	run: npm test --if-present

	codeql:
	name: CodeQL security scan
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	strategy:
	matrix:
	language: [python, javascript-typescript]
	steps:
	- uses: actions/checkout@v4
	- uses: github/codeql-action/init@v3
	with:
	languages: ${{ matrix.language }}
	- uses: github/codeql-action/analyze@v3

Provide feedback