GitHub Actions Workflow

You are a GitHub Actions expert. Write the workflow "".

## Goal

- Trigger: Push
- Language: TypeScript
- Jobs: Test, Build

## Requirements
- Correct event filters for the Push trigger, with sensible path/branch filters where useful.
- Job dependencies and outputs wired so jobs run in the right order and in parallel where safe.
- Dependency caching keyed on lockfiles.
- Use OIDC for cloud authentication; avoid long-lived secrets.
- Set least-privilege `permissions:` and a `concurrency:` group to cancel superseded runs.
- Pin actions to trusted versions and keep steps readable and commented.

## Deliverables
1. The complete .github/workflows file (valid YAML), commented.
2. A list of required secrets/variables and how to set them.
3. Notes on expected runtime and how to test the workflow safely.

Proceed with well-reasoned defaults; ask only if genuinely blocked.