ci: drop container: for Godot jobs, install via composite action

The first Gitea Actions runs failed at actions/checkout@v4 because
barichello/godot-ci:4.6 ships without Node.js, which the JS-based
checkout action requires. Rather than chase a Godot CI image that
bundles Node, drop the container: blocks entirely: the default
catthehacker/ubuntu:act-latest runner image already has Node /
Python / git / JDK, and Godot is installed per-job from the
official GitHub release.

Pulled the install logic into a local composite action at
.gitea/actions/setup-godot/ to avoid duplicating 15 lines of wget +
unzip across the three Godot-using jobs. Inputs:
  - version  (default 4.6)
  - templates (default false — export jobs flip to true)

Other tweaks:
- export-android now puts $ANDROID_HOME under $GITHUB_WORKSPACE so
  no sudo is needed; editor_settings-4.tres interpolates that path.
- export-android writes the keystore under /tmp instead of /root
  (catthehacker runners don't run as root).

README updated: jobs table reflects the new "Tooling installed by the
job" column, prerequisites no longer mention the Docker image, and
known-issue #1 is closed out with the dated fix.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.gitea/workflows/README.md

@@ -5,19 +5,26 @@ Workflow defined in [`build.yml`](./build.yml). Triggered on push / PR to
 
 ## Jobs
 
-| Job                  | Image                       | Role                                                                                     |
-|----------------------|-----------------------------|------------------------------------------------------------------------------------------|
-| `validate`           | `barichello/godot-ci:4.6`   | `godot --headless --import` then grep for `SCRIPT ERROR` / `Parse Error`. Uploads `.godot/` cache. |
-| `lint`               | `ubuntu-latest` (Python)    | `gdlint scripts db scenes` via `gdtoolkit==4.*` (Scony). Parallel to `validate`; does not gate exports yet. |
-| `export-desktop`     | `barichello/godot-ci:4.6`   | Matrix: Windows / Linux / macOS. Reuses the import cache, uploads each binary as artifact. |
-| `export-android`     | `barichello/godot-ci:4.6` + JDK 17 + Android SDK installed at runtime | Provisions keystore, writes `editor_settings-4.tres` with SDK / JDK paths, exports APK. |
+All jobs run on the default `ubuntu-latest` runner image (which already
+ships Node, Python, git, wget, unzip, etc.). Godot is installed per-job
+via the local composite action [`.gitea/actions/setup-godot`](../actions/setup-godot/action.yml),
+which downloads the official Linux binary from the godotengine GitHub
+release and (optionally) export templates into `$HOME`.
+
+| Job              | Tooling installed by the job                                              | Role                                                                                     |
+|------------------|---------------------------------------------------------------------------|------------------------------------------------------------------------------------------|
+| `validate`       | Godot binary (no templates)                                               | `godot --headless --import` then grep for `SCRIPT ERROR` / `Parse Error`. Uploads `.godot/` cache. |
+| `lint`           | `gdtoolkit==4.*` via `pip`                                                | `gdlint scripts db scenes`. Parallel to `validate`; does not gate exports yet.           |
+| `export-desktop` | Godot binary + export templates                                           | Matrix: Windows / Linux / macOS. Reuses the import cache, uploads each binary as artifact. |
+| `export-android` | Godot binary + export templates + JDK 17 + Android SDK (under `$GITHUB_WORKSPACE/.android-sdk`) | Provisions keystore, writes `editor_settings-4.tres` with SDK / JDK paths, exports APK. |
 
 Artifacts are kept 14 days, accessible from the Gitea run page.
 
 ## Prerequisites before the first successful run
 
-1. **Docker image tag** — verify `barichello/godot-ci:4.6` exists on Docker
-   Hub. Otherwise adjust `GODOT_IMAGE` (common alternatives: `4.3`, `4.4`).
+1. **Godot version** — `GODOT_VERSION` is set at the top of the workflow
+   (currently `4.6`). The setup action expects a stable release on the
+   godotengine GitHub releases page; bump in lockstep with the project.
 2. **macOS preset missing** — add it in Godot Editor → Project → Export →
    Add → macOS, name it exactly `macOS` (or change the matrix entry). The
    `.zip` will be unsigned; on Mac it needs
@@ -25,9 +32,11 @@ Artifacts are kept 14 days, accessible from the Gitea run page.
 3. **`Linux/X11Debug` preset** — Godot-3-era name. Reopen the project in
    Godot 4 once and re-save the preset (the editor may rename it). Update
    the matrix `preset:` field accordingly if it does.
-4. **Gitea runner** — must support Docker containers (`act_runner` in
-   `docker` mode, or `host` mode with Docker installed). Check
-   `act_runner exec` access to Docker Hub.
+4. **Gitea runner** — `act_runner` with the default
+   `catthehacker/ubuntu:act-latest` image is enough; no Docker-in-Docker
+   needed now that no job uses `container:`. The runner must reach
+   `github.com` (for actions + Godot release downloads) and
+   `dl.google.com` (for the Android SDK).
 5. **Optional secret** `ANDROID_KEYSTORE_BASE64` — `base64 -w0 debug.keystore`,
    stored as a Gitea repo secret. Without it, a throwaway keystore is
    generated per run, so the APK signature changes every build.
@@ -52,24 +61,17 @@ project-wide with a `gdlintrc` file at the repo root (see
 Captured from the first triggered runs on `feature/godot-migration`
 (2026-05-17). Both must be resolved before the workflow can pass.
 
-### 1. Container jobs fail at `actions/checkout@v4` with `node: not found`
+### 1. Container jobs failed with `node: not found` (resolved 2026-05-17)
 
-```
-OCI runtime exec failed: ... exec: "node": executable file not found in $PATH
-```
+The first runs used `container: barichello/godot-ci:4.6` for the Godot
+jobs. That image does not ship Node.js, so `actions/checkout@v4` (a JS
+action) crashed at startup with
+`OCI runtime exec failed: exec: "node": executable file not found`.
 
-`actions/checkout@v4` is a JavaScript action and needs Node.js inside
-the container. The `barichello/godot-ci:4.6` image does not ship Node,
-so every job using `container:` (validate, export-desktop, export-android)
-breaks immediately.
-
-Fix path (recommended): drop the `container:` block entirely and install
-Godot in a step (the default `catthehacker/ubuntu:act-latest` image used
-for `runs-on: ubuntu-latest` already has Node, Python, git, JDK). The
-`lint` job is already structured this way.
-
-Alternative: switch to a Godot CI image that bundles Node (some community
-images do); pin a specific tag.
+Resolved by removing every `container:` block. The runner's default
+`catthehacker/ubuntu:act-latest` image already has Node / Python / git /
+JDK, and Godot is now installed at the start of each job via the local
+composite action `.gitea/actions/setup-godot/`.
 
 ### 2. `actions/checkout` clones the wrong URL (resolved 2026-05-17)