Match s5p CI pattern — run jobs inside containers managed by the
runner rather than invoking podman directly on the host. Avoids
rootless namespace permission issues.
Host runner lacks git and node. Fetch repo archive via wget in
alpine container, then run lint/link-check against extracted files.
Single-line commands to avoid multiline escaping issues.
- Markdown lint via markdownlint-cli2 container
- Internal cross-reference checker for See Also sections
- Both jobs run on linux runner using podman containers
