ci: establish trusted quality baseline

.gitea/workflows/docker-image.yml

@@ -8,8 +8,31 @@ on:
   workflow_dispatch:
 
 jobs:
+  quality:
+    name: Quality and Bundle Budgets
+    runs-on: gitea-label
+    container:
+      image: cozsweet-act-runner-node24-docker:latest
+    env:
+      NEXT_TELEMETRY_DISABLED: "1"
+      SENTRY_UPLOAD_SOURCEMAPS: "0"
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Run quality checks
+        run: pnpm quality
+
+      - name: Enforce bundle budgets
+        run: pnpm perf:bundle:check
+
   publish:
     name: Build and Push Docker Image
+    needs: quality
     runs-on: gitea-label
     container:
       image: cozsweet-act-runner-node24-docker:latest