Use the governed CI toolchain

.gitea/workflows/build-and-push.yml

@@ -38,46 +38,13 @@ jobs:
         run: |
           cd .
           bash scripts/ci-select.sh
-      - name: Install Go and Docker CLI if needed
+      - name: Verify governed runner toolchain
         if: ${{ steps.delivery.outputs.run == 'true' }}
         shell: bash
         run: |
           set -euo pipefail
-
-          need_apt=0
-          need_apk=0
-          if ! command -v go >/dev/null 2>&1 || ! command -v docker >/dev/null 2>&1; then
-            if command -v apt-get >/dev/null 2>&1; then
-              need_apt=1
-            elif command -v apk >/dev/null 2>&1; then
-              need_apk=1
-            else
-              echo "No supported package manager found" >&2
-              exit 1
-            fi
-          fi
-
-          if [ "$need_apt" -eq 1 ]; then
-            apt-get update
-            if ! command -v go >/dev/null 2>&1; then
-              apt-get install -y golang-go
-            fi
-            if ! command -v docker >/dev/null 2>&1; then
-              apt-get install -y docker.io curl dnsutils iputils-ping
-            fi
-          fi
-
-          if [ "$need_apk" -eq 1 ]; then
-            if ! command -v go >/dev/null 2>&1; then
-              apk add --no-cache go
-            fi
-            if ! command -v docker >/dev/null 2>&1; then
-              apk add --no-cache docker-cli curl bind-tools iputils
-            fi
-          fi
-
-          go version
-          docker version
+          test "$(go version)" = 'go version go1.25.13 linux/amd64'
+          docker version >/dev/null
 
       - name: Run tests
         if: ${{ steps.delivery.outputs.run == 'true' }}
@@ -155,4 +122,4 @@ jobs:
             docker push "$tag"
           done <<'EOF'
           ${{ steps.meta.outputs.tags }}
-          EOF
+          EOF