fix: use correct module path riotpiao.com/kmsvc-proto

actions/checkout@v4 is a JS action that needs node in the job
container to run, but the buf and golang job containers don't ship
Node.js — caused "exec: node: executable file not found" failures.

.forgejo/workflows/ci.yaml

@@ -10,9 +10,27 @@ jobs:
     container:
       image: bufbuild/buf:latest
     steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
+      # actions/checkout@v4 is a JS action — it needs `node` inside the job's
+      # container to run, but bufbuild/buf has no Node.js. Plain git clone has
+      # no such dependency and works in any image.
+      #
+      # The runner's own homelab CA isn't trusted by this container's
+      # default CA bundle, so https clone fails cert verification — install
+      # the CA before cloning.
+      - name: trust homelab CA
+        env:
+          HOMELAB_CA_CERT: ${{ secrets.HOMELAB_CA_CERT }}
+        run: |
+          mkdir -p /usr/local/share/ca-certificates
+          echo "$HOMELAB_CA_CERT" > /usr/local/share/ca-certificates/homelab-ca.crt
+          update-ca-certificates
+
+      - name: checkout
+        env:
+          GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          git clone "https://x-access-token:${GIT_TOKEN}@${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git" .
+          git checkout "${GITHUB_SHA}"
 
       - name: buf lint
         run: buf lint
@@ -26,7 +44,23 @@ jobs:
     container:
       image: golang:1.25
     steps:
-      - uses: actions/checkout@v4
+      # Same reason as the buf job: golang:1.25 has no Node.js, so the JS
+      # action actions/checkout@v4 can't run here — plain git clone instead.
+      - name: trust homelab CA
+        env:
+          HOMELAB_CA_CERT: ${{ secrets.HOMELAB_CA_CERT }}
+        run: |
+          mkdir -p /usr/local/share/ca-certificates
+          echo "$HOMELAB_CA_CERT" > /usr/local/share/ca-certificates/homelab-ca.crt
+          apt-get update -qq && apt-get install -y -qq ca-certificates >/dev/null
+          update-ca-certificates
+
+      - name: checkout
+        env:
+          GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          git clone "https://x-access-token:${GIT_TOKEN}@${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git" .
+          git checkout "${GITHUB_SHA}"
 
       - name: Install buf and protoc plugins
         run: |

.gitignore

@@ -0,0 +1 @@
+.claude

go.mod

@@ -1,4 +1,4 @@
-module forgejo.riotpiao.homelab.com/rock/kmsvc-proto
+module forgejo.riotpiao.homelab.com/riotpiao.com/kmsvc-proto
 
 go 1.25.0