fix/ci-self-hosted-actions
main
The job containers don't trust the Cloudflare origin cert by default. Install and update ca-certificates as the first step so git can clone over HTTPS before actions/checkout runs.