9783b4ac90
- Split single build job into 4 jobs: lint, build, test, push - SHA-pin all actions for supply chain security - Use ChristopherHX artifact actions (Gitea-compatible) - Switch to root build context (Dockerfile does COPY ../public) - Add tests/test.sh with Docker bridge gateway networking