actions

Shared Gitea Actions for Coffey Labs and INBUXA workflows. The instance sets DEFAULT_ACTIONS_URL = self, so uses: coffey-labs/actions/<name>@<sha> resolves here and nothing is fetched from GitHub implicitly.

Pin every use by full commit SHA.

checkout

- uses: coffey-labs/actions/checkout@<sha>
  with:
    fetch-depth: 0   # optional; default 1. 0 = all history and tags
    tags: true       # optional; tags with a shallow fetch

Works in any job image with a POSIX shell. Installs git with apk or apt-get if the image has none, and clones from the runner's internal Gitea address (CI_SERVER_INTERNAL) so CI traffic never crosses Cloudflare.