ci: switch to codeberg-small runner to avoid workspace permission failure

The ubuntu-latest pool now includes nodes that run Docker containers with
user namespace isolation, causing chown of the workspace to fail before
checkout can run. The codeberg-small label routes consistently to the
actions-tiny nodes (act-latest image, no user namespace restriction) where
Dagger CI succeeded previously.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.forgejo/workflows/ci.yml

@@ -8,7 +8,7 @@ on:
 jobs:
   check:
     name: Full Project Check
-    runs-on: ubuntu-latest
+    runs-on: codeberg-small
     timeout-minutes: 60
 
     steps:
@@ -40,7 +40,7 @@ jobs:
 
   build-linux:
     name: Build Linux Release
-    runs-on: ubuntu-latest
+    runs-on: codeberg-small
     needs: check
     if: github.ref == 'refs/heads/main'
     timeout-minutes: 60
@@ -78,7 +78,7 @@ jobs:
 
   deploy-playstore:
     name: Build & Deploy to Play Store
-    runs-on: ubuntu-latest
+    runs-on: codeberg-small
     needs: check
     if: github.ref == 'refs/heads/main'
     timeout-minutes: 60
@@ -124,7 +124,7 @@ jobs:
 
   publish-website:
     name: Publish Website Build History
-    runs-on: ubuntu-latest
+    runs-on: codeberg-small
     needs: [build-linux, deploy-playstore]
     if: |
       always() &&