GitHub Actions CI for a Node appTemplate

Write a GitHub Actions workflow for a {{framework}} app using {{package_manager}}.

Requirements:
- Runs on pull_request and push to main.
- Node {{node_version}}, dependency caching keyed on the lockfile.
- Jobs: lint, typecheck, test, build (fail fast; build only after the others pass).
- Cancels in-progress runs for the same branch.
- Uses least-privilege permissions (contents: read).
- No secrets in logs.

Return the YAML and a one-paragraph explanation of each job.