Merge branch 'main' into fix/preview-deploy-race

.github/workflows/ci.yml

@@ -45,6 +45,19 @@ jobs:
       - uses: actions/checkout@v6
       - run: bash scripts/check-dockerfiles.sh
 
+  openspec:
+    name: OpenSpec Validate
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: pnpm/action-setup@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm openspec validate --all --strict --no-interactive
+
   typecheck:
     name: Typecheck
     runs-on: ubuntu-latest