Self-hosted runner checkout fails after Docker step leaves root-owned workspace

A container-based build step finishes green, but the next checkout or cleanup fails because files written in the workspace are owned by root instead of the runner user.