fix(ci): Fix Playwright browser path and git config in container

GHA overrides HOME=/github/home inside containers, so browsers installed
under /home/runner/.cache weren't found at runtime. Fix by:
- Setting PLAYWRIGHT_BROWSERS_PATH=/opt/pw-browsers (fixed, HOME-independent)
- Using system-wide git config for safe.directory (works with any HOME)
- Removing HOME env overrides from all workflow container configs

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: mydea

.github/docker/playwright.Dockerfile

@@ -20,10 +20,12 @@ RUN sudo curl -fsSL https://deb.nodesource.com/setup_${NODE_VERSION%%.*}.x | sud
     sudo npm install -g yarn@${YARN_VERSION}
 
 # Install Playwright browsers and their OS-level dependencies.
-# `--with-deps` installs required system libraries (libglib, libatk, libnss, etc.).
-RUN sudo npx playwright@${PLAYWRIGHT_VERSION} install chromium webkit firefox --with-deps
+# Use a fixed path so browsers are found regardless of HOME at runtime
+# (GHA sets HOME=/github/home inside containers, not /home/runner).
+ENV PLAYWRIGHT_BROWSERS_PATH=/opt/pw-browsers
+RUN sudo mkdir -p /opt/pw-browsers && \
+    sudo npx playwright@${PLAYWRIGHT_VERSION} install chromium webkit firefox --with-deps
 
-# Mark GitHub Actions workspace as safe for git.
-# The container may run with a different workspace owner,
-# causing "dubious ownership" errors in git operations (e.g. rollup build).
-RUN git config --global --add safe.directory '*'
+# Mark GitHub Actions workspace as safe for git (system-wide config so it
+# works regardless of HOME, which GHA overrides to /github/home).
+RUN sudo git config --system --add safe.directory '*'

.github/workflows/build.yml

@@ -502,8 +502,6 @@ jobs:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
       options: --ipc=host
-      env:
-        HOME: /home/runner
     timeout-minutes: 25
     strategy:
       fail-fast: false
@@ -608,8 +606,6 @@ jobs:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
       options: --ipc=host
-      env:
-        HOME: /home/runner
     timeout-minutes: 15
     strategy:
       fail-fast: false
@@ -804,8 +800,6 @@ jobs:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
       options: --ipc=host
-      env:
-        HOME: /home/runner
     timeout-minutes: 15
     strategy:
       fail-fast: false
@@ -910,8 +904,6 @@ jobs:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
       options: --ipc=host
-      env:
-        HOME: /home/runner
     timeout-minutes: 15
     env:
       # We just use a dummy DSN here, only send to the tunnel anyhow
@@ -1044,8 +1036,6 @@ jobs:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
       options: --ipc=host
-      env:
-        HOME: /home/runner
     timeout-minutes: 15
     env:
       E2E_TEST_AUTH_TOKEN: ${{ secrets.E2E_TEST_AUTH_TOKEN }}

.github/workflows/canary.yml

@@ -78,8 +78,6 @@ jobs:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
       options: --ipc=host
-      env:
-        HOME: /home/runner
     timeout-minutes: 20
     env:
       # We just use a dummy DSN here, only send to the tunnel anyhow

.github/workflows/flaky-test-detector.yml

@@ -46,8 +46,6 @@ jobs:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
       options: --ipc=host
-      env:
-        HOME: /home/runner
     timeout-minutes: 60
     name: 'Check tests for flakiness'
     # Also skip if PR is from master -> develop