fix: use self-contained catalog runner image

.gitea/workflows/package-hosts-verify.yml

@@ -6,6 +6,8 @@ on:
 jobs:
   catalog:
     runs-on: ubuntu-latest
+    container:
+      image: docker.m.daocloud.io/library/node:22-bookworm
     permissions:
       contents: read
     steps:
@@ -13,10 +15,6 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          if ! command -v git >/dev/null 2>&1; then
-            apt-get update
-            DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates git
-          fi
           ref="${{ gitea.sha }}"
           git init .
           git remote add origin "https://git.crash.work/ShrinkSDK/Workspace.git"

.gitea/workflows/workspace-validate.yml

@@ -9,6 +9,8 @@ on:
 jobs:
   catalog:
     runs-on: ubuntu-latest
+    container:
+      image: docker.m.daocloud.io/library/node:22-bookworm
     permissions:
       contents: read
     steps:
@@ -16,10 +18,6 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          if ! command -v git >/dev/null 2>&1; then
-            apt-get update
-            DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates git
-          fi
           ref="${{ gitea.sha }}"
           git init .
           git remote add origin "https://git.crash.work/ShrinkSDK/Workspace.git"