fix: add Docker daemon startup to run kaniko container (#212)

Kaniko itself doesn't need Docker, but we use 'docker run' to execute
the kaniko container. The daemon only needs to run containers, not
build images, so we use minimal flags (--iptables=false, --bridge=none,
--storage-driver=vfs).

Reviewed-on: graham/towerops-web#212

.forgejo/workflows/production.yaml

@@ -90,6 +90,19 @@ jobs:
         with:
           fetch-depth: 0  # Need full history for git operations
 
+      - name: Start Docker daemon
+        run: |
+          # Start Docker daemon to run kaniko container
+          if ! docker info > /dev/null 2>&1; then
+            sudo dockerd \
+              --iptables=false \
+              --ip6tables=false \
+              --bridge=none \
+              --storage-driver=vfs &
+            # Wait for Docker to be ready
+            timeout 30 bash -c 'until docker info > /dev/null 2>&1; do sleep 1; done'
+          fi
+
       - name: Generate image tag
         id: tag
         run: |