release: CI hardening — full build pre-check and pr-scan fix

[mesrikanthreddy]

Summary

• Consolidate all CI checks into a single ci.yml targeting dev and master (replaces the old kshield-ci.yml which targeted wrong branches)
• Add type check step (tsc --noEmit) to frontend job — catches TS errors before the build runs
• Fix pr-scan jq error: scan endpoint returns {anomalies:[]} object, not an array — accumulate a flat [{file, anomaly}] list per file instead of trying to add incompatible types
• Add Rust build cache via Swatinem/rust-cache to speed up CLI job
• Remove unused import React from Badge.tsx, Icons.tsx, StatusDot.tsx — these caused tsc -b to fail in the Pages deploy

Jobs on every PR to dev or master

Job	Checks
cli	cargo build --release + cargo test
backend	pip install + import check + pytest
frontend	tsc --noEmit + npm run build
pr-scan	Scans changed files via live backend, posts inline review comments