ci: tambah job pint non-blocking ke CI (ST-05/BP-2)

- CI phpunit sudah ada dari review-2 (matrix 8.2/8.3, MySQL, Vite, pymupdf, migrate)
- tambah job 'pint' informational (continue-on-error) - repo masih punya 290 file
  utang style, jadi non-blocking sampai ada inisiatif pint repo-wide terpisah

Catatan risiko CI didokumentasikan: 2 test time-dependent (subMonths off-by-one)
bisa bikin CI merah di tanggal berbeda; uncompromised() HIBP butuh internet.

Ref: docs/review-version-3/tasks/ST-05-ci.yml

Author: agitnaeta

.github/workflows/ci.yml

@@ -104,3 +104,26 @@ jobs:
       - name: Run PHPUnit
         # artisan test OOM di app ini (render menu) — pakai phpunit langsung + flag memory.
         run: php -d memory_limit=2G -d xdebug.mode=off vendor/bin/phpunit --no-coverage
+
+  pint:
+    name: Pint (style, informational)
+    runs-on: ubuntu-latest
+    # Non-blocking: repo masih punya utang style lama (290 file). Job ini
+    # menampilkan pelanggaran tanpa memerahkan CI, sampai ada inisiatif
+    # `pint` repo-wide terpisah. Setelah bersih, hapus continue-on-error.
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.3'
+          coverage: none
+          tools: composer:v2
+
+      - name: Install dependencies
+        run: composer install --no-interaction --prefer-dist --no-progress
+
+      - name: Check code style (Pint)
+        run: vendor/bin/pint --test

docs/review-version-3/rencana-perbaikan.md

@@ -39,7 +39,7 @@
 | ST-02 | `app/Exports/SalaryRecapExport.php` | PERF-7 FromQuery + chunk | 🟡 | [x] DONE |
 | ST-03 | `app/Exports/LoanExport.php` | PERF-7 FromQuery + chunk | 🟡 | [x] DONE |
 | ST-04 | `app/Repositories/LoanRepository.php` | PERF-3 buang subquery ganda O(n) | 🟡 | [x] DONE |
-| ST-05 | `.github/workflows/ci.yml` (baru) | BP-2 CI phpunit + pint | 🟠 | [ ] TODO |
+| ST-05 | `.github/workflows/ci.yml` (baru) | BP-2 CI phpunit + pint | 🟠 | [x] DONE (CI phpunit sudah ada dari v2; +job pint non-blocking) |
 
 ---
 

docs/review-version-3/tasks/ST-05-ci.yml

@@ -2,11 +2,54 @@
 
 **Fokus:** BP-2 — GitHub Actions CI (file BARU)
 **Severity:** 🟠 Tinggi
-**Status:** [ ] TODO — commit: `______`
+**Status:** [x] DONE — commit: `pending` (terverifikasi 2026-08-29)
 **File (satu-satunya) yang disentuh:** `.github/workflows/ci.yml`
 
 ---
 
+## ⚠️ KOREKSI (temuan saat eksekusi)
+
+Ternyata `.github/workflows/ci.yml` **SUDAH ADA** (dari review-2) dan JAUH lebih lengkap
+dari draft awal ST-05 — sudah menangani semua pitfall CI:
+- Matrix PHP **8.2/8.3**, service **MySQL 8.0** + health-check + wait loop.
+- **Vite build** (`npm ci && npm run build`) → view test punya `public/build/manifest.json`.
+- **pymupdf** (`pip install`) → CvExtractionService bisa baca PDF.
+- migrate `--force` + phpunit dgn flag memory (hindari OOM `artisan test`).
+
+Yang KUTAMBAH di ST-05: job **`pint`** sebagai **informational (`continue-on-error: true`)**.
+
+## Keputusan penting (jujur)
+- **Kode belum pint-clean: 290 file punya pelanggaran style** (utang lama, bukan dari
+  Review v3). Menjadikan `pint --test` sebagai gate BLOCKING → CI langsung merah di 290
+  file → CI tak berguna.
+- Maka job pint dibuat **non-blocking** (`continue-on-error: true`): pelanggaran TERLIHAT
+  di tab Actions tapi tak memerahkan CI. Setelah ada inisiatif `pint` repo-wide terpisah,
+  tinggal hapus `continue-on-error`.
+
+## PROOF (2026-08-29)
+```
+$ ruby -ryaml validate .github/workflows/ci.yml
+YAML valid
+jobs: phpunit, pint
+
+$ vendor/bin/pint --test | grep -c "⨯"
+290                     # utang style lama -> alasan job pint non-blocking
+
+$ phpunit (simulasi CI lokal)
+Tests: 427, Assertions: 1111, Failures: 2   # 2 baseline time-dependent
+```
+
+## Catatan risiko CI (untuk ditindak terpisah)
+1. **2 failure baseline `time-dependent`** (`OrgStructureTest` months-of-service,
+   `TaxServiceTest` THR prorata — `subMonths()` off-by-one). Di CI yang jalan pada
+   tanggal berbeda, jumlah failure bisa berubah → CI bisa merah tak terduga. **Perlu
+   di-fix agar CI stabil** (pakai `Carbon::setTestNow()` di test tsb).
+2. **`uncompromised()` (HIBP) di QW-04/05** memanggil API eksternal → di CI perlu internet
+   (runner GitHub punya, tapi menambah latensi/kerapuhan). Pertimbangkan mock/disable rule
+   HIBP di env test.
+
+---
+
 ## Masalah
 Tak ada CI. 51 test PHPUnit + harness browser tak jalan otomatis per-PR → regres lolos.