Install was pulling bookworm packages from deb.debian.org; the domestic Gitea runner crawls that for minutes. Rewrite sources to TUNA before apt-get/apk, with CST_CI_MIRROR to override.
