name: foundation-runners description: >- Step-0-after-foundation — the fenced Forgejo Actions runner fleet on libvirt hosts (e.g. crunchy01), as an ISOLATED stack. Decoupled from `bootstrap` on purpose: a @pulumi/libvirt provider dials the runner host on every up/refresh, so keeping it here (never imported by bootstrap) means foundation ops never require — and are never blocked by — the runner host. One-way dependency: needs the forge up to mint a runner token (i.e. runs after the foundation stands). runtime: name: nodejs options: packagemanager: bun