ci: gate GitHub Pages deploy on the ci workflow passing

static.yml deployed frontend/ to GitHub Pages on every push to main,
completely independent of test.yml -- a failing/broken JS file could
ship regardless of CI's result, since the two workflows never talked
to each other.

Switched the trigger from push to workflow_run against the 'ci'
workflow (matches test.yml's `name: ci`), and added an explicit
conclusion == 'success' check, so a failing test.yml run (including
the node --check step added earlier in this branch) now blocks the
Pages deploy instead of shipping it. workflow_dispatch is still
allowed through for manual deploys.

.github/workflows/static.yml

@@ -1,8 +1,10 @@
 name: Deploy BharatGraph Frontend
 
 on:
-  push:
+  workflow_run:
+    workflows: ["ci"]
     branches: [main]
+    types: [completed]
   workflow_dispatch:
 
 permissions:
@@ -16,6 +18,9 @@ concurrency:
 
 jobs:
   deploy:
+    if: >
+      github.event_name == 'workflow_dispatch' ||
+      github.event.workflow_run.conclusion == 'success'
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}