Copy the Docker CLI from the official image instead of apt, and use
--network=host during docker build so apt and layer pulls can resolve
external registries on standalone runners.
Co-authored-by: Cursor <cursoragent@cursor.com>
Pre-build Python, uv, and locked deps in a Gitea container image so daily jobs skip repeated bootstrap; document runner registry auth and ci-bot credentials.
Co-authored-by: Cursor <cursoragent@cursor.com>