fix(ci): standardize runs-on labels and remove unused docker.io

- Changed all jobs from 'runs-on: docker' to 'runs-on: [linux, docker]'
  to match ci.yaml pattern and runner labels configuration
- Removed unnecessary docker.io package from deploy job since Docker
  commands run on remote SSH host, not inside CI container
- Aligned with Forgejo runner config having both 'linux' and 'docker' labels

.forgejo/workflows/deploy.yaml

@@ -11,7 +11,7 @@ env:
 
 jobs:
   lint:
-    runs-on: docker
+    runs-on: [linux, docker]
     container:
       image: catthehacker/ubuntu:act-latest
     steps:
@@ -30,7 +30,7 @@ jobs:
         run: black --check app tests scripts
 
   test:
-    runs-on: docker
+    runs-on: [linux, docker]
     container:
       image: catthehacker/ubuntu:act-latest
     env:
@@ -61,7 +61,7 @@ jobs:
             -v --tb=short
 
   type-check:
-    runs-on: docker
+    runs-on: [linux, docker]
     container:
       image: catthehacker/ubuntu:act-latest
     steps:
@@ -86,7 +86,7 @@ jobs:
           echo "Type check completed successfully"
 
   build:
-    runs-on: docker
+    runs-on: [linux, docker]
     needs: [lint, test]
     container:
       image: catthehacker/ubuntu:act-latest
@@ -120,7 +120,7 @@ jobs:
           provenance: false
 
   deploy:
-    runs-on: docker
+    runs-on: [linux, docker]
     needs: build
     if: github.ref == 'refs/heads/main'
     container:
@@ -143,7 +143,7 @@ jobs:
 
       - name: Install dependencies
         run: |
-          apt-get update && apt-get install -y bash openssh-client curl docker.io
+          apt-get update && apt-get install -y bash openssh-client curl
           mkdir -p ~/.ssh
           chmod 700 ~/.ssh