The workflow assumed $GITHUB_WORKSPACE was already a git repo, but the host-mode runner doesn't auto-checkout. Added an explicit clone step using the runner's deploy key (gitea@giteassh.buzzbee.dev).
bot-hermes