feat(token-ops): add group-governed token operations example app #3

	name: TokenOps CI

	on:
	push:
	branches: [main]
	paths:
	- 'example-apps/token-ops/**'
	- '.github/workflows/token-ops-ci.yml'
	pull_request:
	branches: [main]
	paths:
	- 'example-apps/token-ops/**'
	- '.github/workflows/token-ops-ci.yml'
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: token-ops-ci-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	check:
	name: test + build
	runs-on: ubuntu-latest
	timeout-minutes: 15
	defaults:
	run:
	working-directory: example-apps/token-ops
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false

	- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
	with:
	node-version-file: .nvmrc
	cache: npm
	cache-dependency-path: example-apps/token-ops/package-lock.json

	- name: Show Node/npm versions
	run: \|
	node -v
	npm -v

	- name: Install
	run: npm ci

	- name: Test
	run: npm test

	# tsc -b runs as part of build, so this covers the typecheck too.
	- name: Build
	run: npm run build

Provide feedback