fix: replace actions/checkout in build-iso-dev.yml (THE ACTUAL WORKFLOW)

We were editing build-iso.yml but Gitea runs build-iso-dev.yml.
Replaced actions/checkout@v4 with direct git fetch+rsync.
This is the root cause of stale builds all day.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/workflows/build-iso-dev.yml

@@ -11,33 +11,19 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Checkout
-        id: checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 1
-        timeout-minutes: 5
-        continue-on-error: true
-
-      - name: Sync from local repo (fallback if checkout failed)
         run: |
-          # Only sync from ~/archy if checkout failed or workspace is empty
-          if [ -f "CLAUDE.md" ] && [ -d "core" ] && [ -d "neode-ui" ]; then
-            echo "Checkout succeeded — using checked-out code"
-          elif [ -d "$HOME/archy/core" ] && [ -d "$HOME/archy/neode-ui" ]; then
-            echo "Checkout failed — syncing from ~/archy (LAN fallback)..."
-            rsync -a \
+          # Direct fetch + sync (actions/checkout token is broken on this Gitea)
+          cd /home/archipelago/archy && git fetch origin main && git reset --hard origin/main
+          echo "=== Source at commit: $(git log --oneline -1) ==="
+          rsync -a --delete \
             --exclude '.git' --exclude 'node_modules' --exclude 'target' \
             --exclude 'image-recipe/build' --exclude 'image-recipe/results' \
             --exclude 'web/dist' \
-              "$HOME/archy/" ./
-          else
-            echo "ERROR: No checkout and no local fallback"
-            exit 1
-          fi
-          echo "Workspace verification:"
+            /home/archipelago/archy/ "$GITHUB_WORKSPACE/"
+          cd "$GITHUB_WORKSPACE"
+          echo "=== Workspace version: $(grep '^version' core/archipelago/Cargo.toml) ==="
           [ -f "scripts/first-boot-containers.sh" ] && echo "  first-boot-containers.sh: PRESENT" || echo "  first-boot-containers.sh: MISSING"
           grep -q 'network-alias' scripts/first-boot-containers.sh 2>/dev/null && echo "  network-alias fix: PRESENT" || echo "  network-alias fix: MISSING"
-          grep -q 'apache2-utils' image-recipe/build-auto-installer-iso.sh 2>/dev/null && echo "  apache2-utils: PRESENT" || echo "  apache2-utils: MISSING"
 
       - name: Install ISO build dependencies
         run: |