Replace manual podman run invocations with the runner's container:
directive for lint, test, and secrets jobs. Cleaner step definitions,
no volume mounts needed.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Lint, test, secrets scan, and Harbor build/push jobs running
on linux runner using ephemeral podman containers. Adds
requirements.txt for container-based pip installs.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>