Pin gitea domain to private IP in /etc/hosts to avoid Cloudflare egress

ansible/roles/gitea-runner/tasks/main.yml

@@ -1,4 +1,11 @@
 ---
+- name: Resolve Gitea domain to private IP (avoid Cloudflare for internal traffic)
+  lineinfile:
+    path: /etc/hosts
+    line: "{{ ansible_eth0.ipv4.address }} {{ gitea_domain }}"
+    regexp: "{{ gitea_domain }}"
+    state: present
+
 - name: Create gitea-runner data directory
   file:
     path: "{{ gitea_runner_data_dir }}"