Merge origin/master into TMDB enrichment branch

Resolves conflicts against the dead-component cleanup (#1116), the
max-lines lint baseline (#1117) and the vertical EPG list view (#1115):

- libs/ui/shared-portals/src/index.ts: keep master's barrel (EpgView and
  LiveEpgPanel components were deleted, LiveEpgPanelSummary extracted)
  plus the new actor-view export from this branch
- settings-form.utils.ts / settings.component.spec.ts: keep both the new
  epgViewMode control from master and the tmdb settings group

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

.github/workflows/ci.yml

@@ -10,6 +10,33 @@ on:
     workflow_dispatch:
 
 jobs:
+    lint:
+        name: Lint
+        runs-on: ubuntu-latest
+        timeout-minutes: 30
+
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@v4
+
+            - name: Install pnpm
+              uses: pnpm/action-setup@v4
+
+            - name: Setup Node.js
+              uses: actions/setup-node@v4
+              with:
+                  node-version: '22'
+                  cache: 'pnpm'
+
+            - name: Install dependencies
+              run: pnpm install --frozen-lockfile
+
+            - name: Lint all projects
+              run: pnpm nx run-many --target=lint --all --parallel=3 --output-style=static
+              env:
+                  CI: true
+                  NX_TASKS_RUNNER_DYNAMIC_OUTPUT: false
+
     unit-and-typecheck:
         name: Unit Tests and Typechecks
         runs-on: ubuntu-latest
@@ -43,6 +70,12 @@ jobs:
                   CI: true
                   NX_TASKS_RUNNER_DYNAMIC_OUTPUT: false
 
+            - name: Run Tier B/C validation commands
+              run: node tools/coverage/check-coverage-policy.mjs --run-non-tier-a
+              env:
+                  CI: true
+                  NX_TASKS_RUNNER_DYNAMIC_OUTPUT: false
+
             - name: Upload unit coverage artifact
               if: always()
               uses: actions/upload-artifact@v4