Some checks failed
CI / Unit & Component Tests (pull_request) Has been cancelled
CI / OCR Service Tests (pull_request) Has been cancelled
CI / Backend Unit Tests (pull_request) Has been cancelled
CI / fail2ban Regex (pull_request) Has been cancelled
CI / Compose Bucket Idempotency (pull_request) Has been cancelled
CI / Unit & Component Tests (push) Failing after 2m49s
CI / Backend Unit Tests (push) Has been cancelled
CI / fail2ban Regex (push) Has been cancelled
CI / Compose Bucket Idempotency (push) Has been cancelled
CI / OCR Service Tests (push) Has been cancelled
Closes #508. Our gitea-runner advertises labels ubuntu-latest / ubuntu-24.04 / ubuntu-22.04. `runs-on: self-hosted` never matches → dispatched deploy jobs sit in the queue forever. The runner is still genuinely self-hosted (DooD socket, joined to gitea_gitea net, single-tenant per ADR-011) — the `self-hosted` token was just an unconfirmed assumption about the label name. Unblocks #497 / #499 first deploy. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>