fix(infra): docker:24-dind + capacity 2 (fix moby cgroup-v2 teardown deadlock that hung 'Complete job')

infrastructure/production/fleet/ci/gitea-runner.yaml

@@ -37,9 +37,10 @@ data:
     log:
       level: info
     runner:
-      # Run several jobs at once (the 4-app typecheck matrix + image builds)
+      # Some parallelism without overloading the single shared dind daemon
-      # instead of one-at-a-time. The AX41 has headroom.
+      # (concurrent container teardowns trigger moby's cgroup-v2 removal
-      capacity: 4
+      # deadlock). 2 is a safe balance on this node.
+      capacity: 2
       timeout: 3h
       labels:
         - "ubuntu-latest:docker://catthehacker/ubuntu:act-22.04"
@@ -101,7 +102,10 @@ spec:
             - name: runner-config
               mountPath: /config
         - name: dind
-          image: docker:27-dind
+          # docker:24-dind — moby 24 avoids the cgroup-v2 container-removal
+          # deadlock seen on 27 ("removal of container … is already in
+          # progress" looping → "Complete job" hangs).
+          image: docker:24-dind
           securityContext:
             privileged: true
           env: