Use a container-reachable Forgejo checkout URL and support package installs via root or sudo in container jobs.