fix: CI uses rsync'd local repo as fallback when checkout times out

actions/checkout fetches from Gitea via WAN which is unreliable (times out
on large repos). Added fast LAN fallback that syncs from ~/archy which is
kept current via rsync from dev machine. Includes verification step to
confirm changes are present before building.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/workflows/build-iso-dev.yml

@@ -14,6 +14,28 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 1
+        timeout-minutes: 3
+        continue-on-error: true
+
+      - name: Sync from local repo (fast LAN fallback)
+        run: |
+          # actions/checkout fetches via WAN which is unreliable
+          # ~/archy is kept in sync via rsync from dev machine
+          if [ -d "$HOME/archy/.gitea" ]; then
+            echo "Syncing from ~/archy (rsync'd source)..."
+            rsync -a --delete \
+              --exclude '.git' --exclude 'node_modules' --exclude 'target' \
+              --exclude 'image-recipe/build' --exclude 'image-recipe/results' \
+              --exclude 'web/dist' \
+              "$HOME/archy/" ./
+            echo "Synced. Latest commit msg from source:"
+            head -1 "$HOME/archy/.gitea/workflows/build-iso-dev.yml"
+          else
+            echo "No local repo at ~/archy, relying on checkout"
+          fi
+          echo "Workspace verification:"
+          grep 'torConnected' neode-ui/src/views/Home.vue && echo "  Home.vue changes: PRESENT" || echo "  Home.vue changes: MISSING"
+          grep 'host.containers.internal:host-gateway' scripts/first-boot-containers.sh && echo "  Container DNS fix: PRESENT" || echo "  Container DNS fix: MISSING"
 
       - name: Install ISO build dependencies
         run: |