Run release workflow in containerized steps

.woodpecker/release.yml

@@ -1,8 +1,8 @@
 kind: pipeline
-type: exec
+type: docker
 name: release
 
-node:
+labels:
   podman: "true"
 
 trigger:
@@ -11,6 +11,8 @@ trigger:
 
 steps:
   - name: version-check
+    image: node:20-bullseye
+    pull: true
     commands:
       - bash -lc '
           set -euo pipefail
@@ -63,9 +65,13 @@ steps:
         '
 
   - name: build-artifacts
+    image: node:20-bullseye
+    pull: true
     commands:
       - bash -lc '
           set -euo pipefail
+          apt-get update
+          apt-get install -y curl build-essential pkg-config libssl-dev
           npm config set fund false
           npm config set audit false
           npm ci --prefix kraiken-lib --no-audit --no-fund
@@ -102,6 +108,9 @@ steps:
         '
 
   - name: podman-publish
+    image: mcr.microsoft.com/playwright:v1.56.0-jammy
+    pull: true
+    privileged: true
     environment:
       REGISTRY_SERVER:
         from_secret: registry_server
@@ -114,6 +123,10 @@ steps:
     commands:
       - bash -lc '
           set -eo pipefail
+          export DEBIAN_FRONTEND=noninteractive
+          apt-get update
+          apt-get install -y podman python3-pip curl jq ca-certificates
+          python3 -m pip install --no-cache-dir podman-compose
           if [ -z \"$CI_COMMIT_TAG\" ]; then
             echo \"CI_COMMIT_TAG not set\" >&2
             exit 1