act runner image

Gitea / Forgejo Actions runner image based on runner-images:ubuntu-latest with the pinned, checksum-verified SOPS build installed, plus rsync from apt.

Built and pushed to git.studiovita.li/studio/actions:ubuntu-latest by the build workflow on push to main. Update SOPS_VERSION in Dockerfile to bump SOPS (tracked in renovate.json).