ci: build workspace + generate prisma before typecheck

pnpm -r typecheck ran before pnpm -r build, but the @insignia/* packages
publish their types only via built dist/*.d.ts. So consumers failed with
TS2307 'Cannot find module @insignia/iios-contracts' before any dist existed.
Also generate the iios-service Prisma client so its schema-derived types
resolve. Build now precedes typecheck; prisma:generate precedes both.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.github/workflows/ci.yml

@@ -19,6 +19,13 @@ jobs:
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - run: pnpm boundary
-      - run: pnpm -r typecheck
+      # iios-service uses Prisma: generate the client so its generated types
+      # (schema enums, Prisma.InputJsonValue) are available for typecheck/build.
+      - run: pnpm --filter @insignia/iios-service prisma:generate
+      # Build before typecheck: the @insignia/* workspace packages publish their
+      # types via built dist/*.d.ts, so consumers (iios-kernel-client, etc.)
+      # can only resolve them once dist exists. Typechecking first fails with
+      # TS2307 "Cannot find module '@insignia/iios-contracts'".
       - run: pnpm -r build
+      - run: pnpm -r typecheck
       - run: pnpm test