chore(ci): trigger CI on feature-branch pushes + Windows runner matrix

Pre-this-commit state: CI ran only on push to main or PR-to-main. So a
feature branch could be broken for the entire review window before
anyone noticed — the only signal a branch was unmergeable was a red
check on the PR, which is too late to fix cheaply.

Pre-this-commit CI matrix was also a single point (ubuntu + Node 22).
That hides the Windows-specific EPERM failures CLAUDE.md already
documents, and skips the Node 20 LTS we still promise in engines.

Changes:

  - on.push branches: adds feat/**, fix/**, chore/**, release/**,
    docs/** so CI runs on every push to a working branch, not just on
    PR-time. Failures surface within minutes, not at merge time.

  - matrix.os: ubuntu-latest + windows-latest. Linux is gating
    (continue-on-error: false on ubuntu); Windows is advisory so the
    known pre-existing Windows-only EPERM quirks don't block PRs.

  - matrix.node-version: 20 + 22, matching engines.node >=20.0.0 <25.0.0.
    The previous matrix had only 22 — Node 20 was untested.

  - exclude: drop Windows on Node 20. The matrix stays informative
    (Linux-20, Linux-22, Windows-22) without doubling the per-PR cost.

fail-fast stays false so one failing cell doesn't cancel its peers.
The 'build + vitest' and the 'extract-vba-realfixtures' e2e steps
are unchanged.

Author: ardelperal

.github/workflows/ci.yml

@@ -1,23 +1,53 @@
 name: CI
 
+# Trigger on every push to a feature branch + every PR to main. Without
+# the feature-branch push trigger, CI never runs for in-flight branches and
+# the only signal a branch is broken is "wait until PR time and see it
+# fail" — too late to fix cheaply. The branch list intentionally mirrors
+# the conventional-commit prefixes we use, so `chore/*`, `release/*`,
+# and `docs/*` all pick up CI too.
 on:
   pull_request:
     branches: [main]
   push:
-    branches: [main]
+    branches:
+      - main
+      - 'feat/**'
+      - 'fix/**'
+      - 'chore/**'
+      - 'release/**'
+      - 'docs/**'
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
   test:
-    name: build + vitest (Node ${{ matrix.node-version }})
-    runs-on: ubuntu-latest
+    name: build + vitest (Node ${{ matrix.node-version }}, ${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
-        node-version: [22]
+        # Match the engines field: >=20.0.0 <25.0.0. 22 is the active LTS,
+        # 20 is the previous LTS we still promise. We don't add 24 here
+        # because Node 24 changed sqlite bindings and we want the matrix
+        # to reflect supported configurations, not chase the latest.
+        node-version: [20, 22]
+        # Linux is the gating runner — every PR must pass it. Windows is
+        # advisory: certain tests have pre-existing Windows-only EPERM
+        # failures documented in CLAUDE.md, so we don't block PRs on it.
+        # continue-on-error handles the inverse: a Linux failure still
+        # fails the PR, but a Windows-only failure shows up as a yellow
+        # check rather than red.
+        os: [ubuntu-latest, windows-latest]
+        exclude:
+          # Reduce CI minutes by running Windows only on the active LTS.
+          # Windows on Node 20 would mostly test "did Windows break again"
+          # without telling us anything Node 22 doesn't already.
+          - os: windows-latest
+            node-version: 20
+    continue-on-error: ${{ matrix.os == 'windows-latest' }}
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -44,4 +74,4 @@ jobs:
         run: pnpm test
 
       - name: Run E2E regression (extract-vba-realfixtures)
-        run: pnpm exec vitest run __tests__/extraction-vba-realfixtures.test.ts
+        run: pnpm exec vitest run __tests__/extraction-vba-realfixtures.test.ts