移除代码检出步骤，添加工作区验证

.gitea/workflows/package.yml

@@ -18,40 +18,6 @@ jobs:
         shell: bash
 
     steps:
-      - name: Checkout code
-        env:
-          SERVER_URL: ${{ github.server_url }}
-          REPOSITORY: ${{ github.repository }}
-          COMMIT_SHA: ${{ github.sha }}
-          GIT_USERNAME: ${{ github.actor }}
-          GIT_TOKEN: ${{ github.token }}
-        run: |
-          case "$SERVER_URL" in
-            http://*)
-              AUTH_SERVER_URL="http://${GIT_USERNAME}:${GIT_TOKEN}@${SERVER_URL#http://}"
-              ;;
-            https://*)
-              AUTH_SERVER_URL="https://${GIT_USERNAME}:${GIT_TOKEN}@${SERVER_URL#https://}"
-              ;;
-            *)
-              AUTH_SERVER_URL="$SERVER_URL"
-              ;;
-          esac
-
-          if [ ! -d .git ]; then
-            git init .
-          fi
-
-          if git remote get-url origin >/dev/null 2>&1; then
-            git remote set-url origin "${AUTH_SERVER_URL}/${REPOSITORY}.git"
-          else
-            git remote add origin "${AUTH_SERVER_URL}/${REPOSITORY}.git"
-          fi
-
-          git fetch --depth=1 origin "$COMMIT_SHA"
-          git checkout --force --detach FETCH_HEAD
-          git clean -ffdx
-
       - name: Normalize image metadata
         env:
           RAW_REGISTRY_HOST: ${{ vars.REGISTRY_HOST }}
@@ -158,6 +124,13 @@ jobs:
             exit 1
           fi
 
+      - name: Validate workspace
+        run: |
+          if [ ! -f ./Dockerfile ]; then
+            echo "Dockerfile not found in workspace. Checkout is disabled, so the runner must provide repository files before this job starts."
+            exit 1
+          fi
+
       - name: Build and Push Image
         run: |
           if [ -z "${IMAGE_NAME:-}" ] || [ -z "${IMAGE_TAG:-}" ]; then