fix(forgejo-runner): allow job containers to mount /docker-certs/client so docker login/build/push work

k8s/infra/forgejo-runner/templates/deployment.yaml

@@ -56,7 +56,7 @@ spec:
       containers:
         - name: runner
           image: {{ .Values.runner.image.repository }}:{{ .Values.runner.image.tag }}
-          command: ["sh", "-c", "forgejo-runner daemon"]
+          command: ["sh", "-c", "forgejo-runner daemon --config /etc/forgejo-runner/config.yaml"]
           workingDir: /data
           env:
             - name: DOCKER_HOST
@@ -73,6 +73,9 @@ spec:
             - name: homelab-ca
               mountPath: /etc/ssl/certs/homelab-ca.pem
               subPath: ca.crt
+            - name: runner-config
+              mountPath: /etc/forgejo-runner
+              readOnly: true
           resources:
             {{- toYaml .Values.runner.resources | nindent 12 }}
 
@@ -115,3 +118,6 @@ spec:
           # The volumeMounts use subPath: ca.crt to project the single cert file.
           configMap:
             name: homelab-ca
+        - name: runner-config
+          configMap:
+            name: {{ .Release.Name }}-config