fix(ci): add codegen step to main branch web checks

[ashleeradka]

Prompt / plan

The provider stack PR (#31099) introduced imports from generated HeyAPI clients (@/generated/auth/client.gen.js, @/generated/api/client.gen.js, etc.) and added a bun run openapi-ts codegen step to pr-web.yaml. However, the same step was not added to ci-main-web.yaml, causing type check failures on every push to main since #31099 merged.

Root cause: The two workflow files (pr-web.yaml and ci-main-web.yaml) share the same logical pipeline but are maintained as separate files. When the codegen step was added to one, the other was missed.

Test plan

• CI on this PR verifies the workflow file is valid YAML
• After merge, the next push to main will trigger ci-main-web.yaml with the codegen step, resolving the type check failures

Link to Devin session: https://app.devin.ai/sessions/536ceadb023a4059908b0609b9833bc1
Requested by: @ashleeradka

---

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 1 additional finding.

[vex-assistant-bot]

✦ APPROVE — urgent CI fix, merge immediately.

3-line addition to ci-main-web.yaml — inserts bun run openapi-ts at the same position (post-install, pre-lint) that pr-web.yaml received in #31099. Root cause is correct: the two workflow files share the same logical pipeline but are maintained separately; the codegen step was added to one and missed in the other.

Verified:

• Step placement matches pr-web.yaml exactly ✅
• Devin "No Issues Found" at HEAD 9ce6b464 ✅
• Codex 👍 on description ✅

Merge gate: all criteria met — Vex + Devin + Codex all clear. CI will confirm once the workflow run completes (YAML-only change — no code path to break).