Use docker:latest container for deploy job

Runs job steps in docker:latest image with host socket mounted —
no need to mount host Docker binary.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitea/workflows/deploy.yml

@@ -7,6 +7,9 @@ on:
 jobs:
   deploy:
     runs-on: self-hosted
+    container:
+      image: docker:latest
+      options: -v /var/run/docker.sock:/var/run/docker.sock
 
     steps:
       - name: Pull code
@@ -21,7 +24,7 @@ jobs:
         run: printf 'DB_PASSWORD=%s\n' '${{ secrets.DB_PASSWORD }}' > ${{ secrets.DEPLOY_DIR }}/.env
 
       - name: Build & Deploy
-        run: /usr/local/bin/docker compose -f ${{ secrets.DEPLOY_DIR }}/docker-compose.yml up --build -d
+        run: docker compose -f ${{ secrets.DEPLOY_DIR }}/docker-compose.yml up --build -d
 
       - name: Health check
         run: |