A checkout step fails only after repository ownership hardening

A self-hosted runner begins failing on fetch, submodule, or describe steps after a host hardening or container ownership change.