feat(nx-cloud): set up nx workspace #64

	name: ForgeRock Fork Pull Request CI

	on:
	pull_request:

	permissions:
	contents: read
	actions: read

	concurrency:
	group: pr-${{ github.event.pull_request.number }}
	cancel-in-progress: true

	jobs:
	pr:
	# Only run for forks
	if: ${{ github.event.pull_request.head.repo.full_name != github.repository }}
	runs-on: ubuntu-latest
	timeout-minutes: 20

	steps:
	- uses: actions/checkout@v4
	with:
	# head commit is fine; the default merge ref also works on pull_request
	ref: ${{ github.event.pull_request.head.sha }}
	fetch-depth: 0

	- uses: pnpm/action-setup@v4
	with:
	run_install: false

	- uses: actions/setup-node@v4
	with:
	node-version-file: '.node-version'
	cache: 'pnpm'
	cache-dependency-path: '**/pnpm-lock.yaml'

	- run: pnpm install --frozen-lockfile

	# Restore-only cache to avoid save attempts/noise on forks
	- name: Restore Playwright browsers cache
	uses: actions/cache/restore@v4
	with:
	path: ~/.cache/ms-playwright
	key: ${{ runner.os }}-playwright-${{ hashFiles('**/pnpm-lock.yaml') }}
	restore-keys: \|
	${{ runner.os }}-playwright-

	- run: pnpm exec playwright install --with-deps

	- uses: nrwl/nx-set-shas@v4

	# Needed so nx affected can diff against main
	- run: git branch --track main origin/main \|\| true

	- run: pnpm nx format:check
	- run: pnpm nx affected -t build typecheck lint test e2e-ci

Provide feedback