ci: refresh workflow (re-run pipelines)

.gitea/workflows/ci.yml

@@ -1,5 +1,5 @@
 ---
-# ci-sync: 2026-05-30T01:28:00Z
+# ci-sync: 2026-05-30T01:30:19Z
 # Homelab CI — Python lane (git-ci-01) + secret scan (git-ci-02)
 # Skip: @skipci in branch name or commit message
 name: CI
@@ -34,16 +34,19 @@ jobs:
     if: needs.skip-ci-check.outputs.should-skip != '1'
     runs-on: [homelab, self-hosted, linux, python]
     container:
-      image: python:3.12-bookworm
+      # node image: actions/checkout@v4 needs Node; install python3 in-job
+      image: node:20-bookworm
     steps:
       - uses: actions/checkout@v4
 
       - name: Install Python tooling
         run: |
-          python3 -m pip install --upgrade pip
-          if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
-          if [ -f requirements-dev.txt ]; then pip install -r requirements-dev.txt; fi
-          pip install bandit pip-audit ruff
+          apt-get update -qq
+          DEBIAN_FRONTEND=noninteractive apt-get install -y -qq python3 python3-pip python3-venv
+          python3 -m pip install --upgrade pip --break-system-packages
+          if [ -f requirements.txt ]; then pip install -r requirements.txt --break-system-packages; fi
+          if [ -f requirements-dev.txt ]; then pip install -r requirements-dev.txt --break-system-packages; fi
+          pip install bandit pip-audit ruff --break-system-packages
 
       - name: Ruff lint
         run: ruff check . || true
@@ -57,7 +60,7 @@ jobs:
       - name: Pytest
         run: |
           if [ -d tests ] || ls test_*.py *_test.py 2>/dev/null; then
-            pip install pytest
+            pip install pytest --break-system-packages
             pytest -q || true
           else
             echo "No tests found — skip"