ci: remove redundant artifact uploads from CI workflow

.gitea/workflows/ci.yml

@@ -80,7 +80,7 @@ jobs:
           key: node-modules-${{ needs.quick-checks.outputs.cache-key }}
 
       - name: Install dependencies (if cache miss)
-        run: bun install --frozen-lockfile
+        run: bun install
 
       - name: Run ESLint
         run: bun run lint
@@ -107,7 +107,7 @@ jobs:
           key: node-modules-${{ needs.quick-checks.outputs.cache-key }}
 
       - name: Install dependencies (if cache miss)
-        run: bun install --frozen-lockfile
+        run: bun install
 
       - name: Cache Jest cache
         uses: actions/cache@v4
@@ -143,7 +143,7 @@ jobs:
           key: node-modules-${{ needs.quick-checks.outputs.cache-key }}
 
       - name: Install dependencies (if cache miss)
-        run: bun install --frozen-lockfile
+        run: bun install
 
       - name: Cache Next.js build
         uses: actions/cache@v4
@@ -159,13 +159,6 @@ jobs:
         env:
           NODE_OPTIONS: --max_old_space_size=4096
 
-      - name: Upload build artifacts
-        uses: actions/upload-artifact@v3
-        with:
-          name: build-files
-          path: .next/
-          retention-days: 7
-
   # Job 5: Security audit (can run in parallel)
   security-audit:
     name: Security Audit
@@ -181,19 +174,11 @@ jobs:
         with:
           bun-version: ${{ env.BUN_VERSION }}
 
-      - name: Restore node_modules cache
-        uses: actions/cache@v4
-        with:
-          path: node_modules
-          key: node-modules-${{ needs.quick-checks.outputs.cache-key }}
+      - name: Install node_modules with yarn lockfile
+        run: bun install --frozen-lockfile --yarn
 
-      - name: Install dependencies (if cache miss)
-        run: bun install --frozen-lockfile
+      - name: Run security audit
+        run: bun audit --audit-level moderate
 
-      - name: Run Trivy vulnerability scan
-        uses: aquasecurity/trivy-action@master
-        with:
-          scan-type: 'fs'
-          scan-ref: '.'
-          format: 'sarif'
-          output: 'trivy-results.sarif'
+      - name: Run dependency vulnerability check
+        run: bunx audit-ci --moderate --report-type summary