fix(ci): add git to build deps, runner clone_url to internal service

.gitlab-ci.yml

@@ -29,7 +29,7 @@ variables:
     - kapsule
     - rust
   before_script:
-    - apt-get update && apt-get install -y protobuf-compiler curl pkg-config libssl-dev
+    - apt-get update && apt-get install -y git protobuf-compiler curl pkg-config libssl-dev
     - curl -fsSL https://github.com/mozilla/sccache/releases/download/v0.8.1/sccache-v0.8.1-x86_64-unknown-linux-musl.tar.gz
       | tar xz --strip-components=1 -C /usr/local/bin sccache-v0.8.1-x86_64-unknown-linux-musl/sccache
     - chmod +x /usr/local/bin/sccache

infra/k8s/gitlab/runner-values.yaml

@@ -16,8 +16,11 @@ tolerations:
     effect: NoSchedule
 
 runners:
+  # Override clone URL to internal service (pods can't reach Tailscale IPs)
+  cloneUrl: http://gitlab-webservice-default.foxhunt.svc.cluster.local:8181
   config: |
     [[runners]]
+      clone_url = "http://gitlab-webservice-default.foxhunt.svc.cluster.local:8181"
       [runners.kubernetes]
         namespace = "foxhunt"
         image = "rust:1.89-slim"