tweak(github/ci): rework

[tens0rfl0w]

Goal of this PR

This PR addresses multiple logic issues in the current PR checkout actions, which have rendered the process non-functional.

How is this PR achieving the goal

• To eliminate current and potential future build portability issues for Linux builds, the PR now uses the provided Docker image to build the Linux server inside a container. This mirrors the setup used in the internal GitLab CI.
• The previous implementation used the incorrect GITHUB_REF, checking out the upstream's master head instead of the correct PR branch head ref. This caused the PR changes to remain unchecked.
• To mitigate the risk of malicious code execution via PRs, the permission scope has been tightened. Write access is now restricted solely to the input_validation and post_build steps, isolating tokens with access from any user-submitted code.

Changes have been tested here: https://github.com/tens0rfl0w/fivem/actions/runs/13638653569?pr=20

This PR applies to the following area(s)

Github Actions

Successfully tested on

Game builds: Not applicable

Platforms: GitHub Runners

Checklist

• Code compiles and has been tested successfully.
• Code explains itself well and/or is documented.
• My commit message explains what the changes do and what they are for.
• No extra compilation warnings are added by these changes.

Fixes issues

/

[Mathu-lmn]

Nice PR ! ( supersedes #2900 )

[prikolium-cfx]

Just for the context. I asked author to implement possibility to publish pre-baked Alpine image with all dependencies to our github registry and waiting for that to merge.
Overall PR looks good and should improve PR pipelines. Thank you tens0rfl0w!

[tens0rfl0w]

All done🥳

[prikolium-cfx]

Merged

[Nova-px]

Pulling Docker image from ghcr.io/Nova-px/fivem/fivem-builder-linux-alpine:latest...
invalid reference format: repository name (Nova-px/fivem/fivem-builder-linux-alpine) must be lowercase
Error: Process completed with exit code 1.

I dont know if its related to the ci rework but just got that error right now

[prikolium-cfx]

Pulling Docker image from ghcr.io/Nova-px/fivem/fivem-builder-linux-alpine:latest...
invalid reference format: repository name (Nova-px/fivem/fivem-builder-linux-alpine) must be lowercase
Error: Process completed with exit code 1.

I dont know if its related to the ci rework but just got that error right now

If that happens in your fork you need to build Linux Docker image once from "Actions" -> "Build Alpine server building image" -> "Run workflow"

[Nova-px]

Pulling Docker image from ghcr.io/Nova-px/fivem/fivem-builder-linux-alpine:latest...
invalid reference format: repository name (Nova-px/fivem/fivem-builder-linux-alpine) must be lowercase
Error: Process completed with exit code 1.

I dont know if its related to the ci rework but just got that error right now

If that happens in your fork you need to build Linux Docker image once from "Actions" -> "Build Alpine server building image" -> "Run workflow"

Error: buildx failed with: ERROR: invalid tag "ghcr.io/Nova-px/fivem/fivem-builder-linux-alpine:latest": repository name must be lowercase

Same error

[tens0rfl0w]

Will fix this (and another oversight) in the next days. Thanks for reporting this!