Full --no-cache exceeded runner time budget. Use DEPS_LOCK_ID build-arg and fail-fast checks on requirements.txt instead.
The main-f9f0091 Forgejo image shipped with an empty venv (0-byte requirements.txt). Add Dockerfile RUN verification, --no-cache on CI build, and a post-build import smoke test before push.