Run vendored artifact uploader directly

.gitea/workflows/backend-quality-gate.yml

@@ -269,22 +269,32 @@ jobs:
             artifacts/staging-images/manifest.env "$GITEA_SHA" "$IMAGE_REPOSITORY" >/dev/null
 
       - name: Upload immutable staging image manifest
-        uses: ./.gitea/actions/upload-artifact
-        # act_runner 0.6.1 resolves local Node actions but does not export their
-        # `with` values as INPUT_* variables. Keep `with` for newer runners and
-        # provide the same variables explicitly for the current staging runner.
-        env:
-          INPUT_NAME: staging-image-manifest-${{ gitea.sha }}-${{ gitea.run_attempt }}
-          INPUT_PATH: artifacts/staging-images/manifest.env
-          'INPUT_IF-NO-FILES-FOUND': error
-          'INPUT_RETENTION-DAYS': '30'
-          'INPUT_COMPRESSION-LEVEL': '6'
-          INPUT_OVERWRITE: 'false'
-        with:
-          name: staging-image-manifest-${{ gitea.sha }}-${{ gitea.run_attempt }}
-          path: artifacts/staging-images/manifest.env
-          if-no-files-found: error
-          retention-days: 30
+        run: |
+          set -euo pipefail
+          test -n "${ACTIONS_RUNTIME_TOKEN:-}"
+          test -n "${ACTIONS_RESULTS_URL:-}"
+          test -n "${GITHUB_RUN_ID:-}"
+          test -n "${GITHUB_REPOSITORY:-}"
+          workdir="$(pwd -P)"
+          docker run --rm \
+            --user "$(id -u):$(id -g)" \
+            --volume "$workdir:$workdir" \
+            --workdir "$workdir" \
+            --env HOME=/tmp \
+            --env "INPUT_NAME=staging-image-manifest-$GITEA_SHA-$GITEA_RUN_ATTEMPT" \
+            --env INPUT_PATH=artifacts/staging-images/manifest.env \
+            --env 'INPUT_IF-NO-FILES-FOUND=error' \
+            --env 'INPUT_RETENTION-DAYS=30' \
+            --env 'INPUT_COMPRESSION-LEVEL=6' \
+            --env INPUT_OVERWRITE=false \
+            --env ACTIONS_RUNTIME_TOKEN \
+            --env ACTIONS_RESULTS_URL \
+            --env GITHUB_RUN_ID \
+            --env GITHUB_REPOSITORY \
+            --env "GITHUB_SHA=$GITEA_SHA" \
+            --env "GITHUB_WORKSPACE=$workdir" \
+            node:22-bookworm-slim \
+            node .gitea/actions/upload-artifact/dist/index.js
 
       - name: Logout ACR registry
         if: always()