The forgejo-runner on srv-102v advertises labels `incus:host,self-hosted:host`,
so jobs pinned to `ubuntu-latest` matched no runner and exited in 0s.
- ci.yml / security-scan.yml / trivy-fs.yml: runs-on → [self-hosted, incus]
- e2e.yml / go-fuzz.yml / loadtest.yml: same migration AND gate triggers to
workflow_dispatch only (push/pull_request/schedule commented out) — single
self-hosted runner, heavy suites would block the queue.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>