ci: run socket-free jobs on the light label
ci / shellcheck (pull_request) Successful in 11s
ci: Gitea Actions workflow (proving run, not for merge here)
ci / shellcheck (pull_request) Successful in 43s