perf(ci): move public CLI workflows to free GitHub runners

.github/workflows/ci-dockerfile.yml

@@ -7,7 +7,7 @@ on:
 run-name: CI Dockerfile by @${{ github.actor }} ${{ github.sha }}
 jobs:
   lint:
-    runs-on: office-ci-small
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - name: hadolint

.github/workflows/ci-go.yml

@@ -9,7 +9,7 @@ on:
 run-name: CI Go by @${{ github.actor }} ${{ github.sha }}
 jobs:
   build-test:
-    runs-on: office-ci-small
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-go@v6
@@ -25,7 +25,7 @@ jobs:
         id: extract_version
         run: |
           version=$(sh scripts/get_golangci_lint_version.sh)
-          echo "golangci_lint_version=$version" >> $GITHUB_OUTPUT
+          echo "golangci_lint_version=$version" >> "$GITHUB_OUTPUT"
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v9
         with:

.github/workflows/ci-require-labels.yml

@@ -11,7 +11,7 @@ permissions:
 jobs:
   require-labels:
     if: ${{ github.event_name == 'pull_request' }}
-    runs-on: office-ci-small
+    runs-on: ubuntu-24.04
     outputs:
       status: ${{ steps.require-labels.outputs.status }}
     steps:

.github/workflows/release.yml

@@ -16,21 +16,27 @@ permissions:
 jobs:
   get-version:
     name: Version
-    runs-on: office-ci-small
+    runs-on: ubuntu-24.04
     outputs:
       version: ${{ steps.get-version.outputs.version }}
     steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          persist-credentials: false
       - name: Get Release Version
         id: get-version
         uses: nullify-platform/github-actions/actions/release-version@main
       - run: |
-          echo "**Version:** ${{ steps.get-version.outputs.version }}" >> $GITHUB_STEP_SUMMARY
-          echo "**Short SHA:** $(git rev-parse --short HEAD)" >> $GITHUB_STEP_SUMMARY
+          {
+            echo "**Version:** ${{ steps.get-version.outputs.version }}"
+            echo "**Short SHA:** $(git rev-parse --short HEAD)"
+          } >> "$GITHUB_STEP_SUMMARY"
   goreleaser:
     if: ${{ needs.get-version.outputs.version != 'undefined' }}
     name: GoReleaser
     needs: [get-version]
-    runs-on: office-ci-small
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
         with:

.github/workflows/scorecard.yml

@@ -13,7 +13,7 @@ run-name: OSSF Scorecard by @${{ github.actor }} ${{ github.sha }}
 jobs:
   analysis:
     name: Scorecard analysis
-    runs-on: office-ci-small
+    runs-on: ubuntu-24.04
     permissions:
       security-events: write
       id-token: write