fix(ci): wrap kaniko in act-compatible image

act starts job containers with entrypoint /bin/sleep, which kaniko's
scratch-based image lacks (busybox lives under /busybox). kaniko-act
adds the single missing symlink; bootstrap build is manual, documented
in the Dockerfile.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.gitea/workflows/build-image.yml

@@ -11,9 +11,10 @@ jobs:
   build:
     runs-on: ubuntu-latest
     container:
-      # Daemonless image builder; :debug variant ships a busybox shell so
-      # act can exec steps inside it. No docker socket, no privileges.
-      image: gcr.io/kaniko-project/executor:v1.23.2-debug
+      # Daemonless image builder: kaniko :debug plus the /bin/sleep symlink
+      # act needs for job-container PID 1 (see ci/Dockerfile.kaniko-act).
+      # No docker socket, no privileges.
+      image: pi5-16.local:3005/mikkeli/kaniko-act:v1.23.2
 
     steps:
       - name: Fetch source, build, push