CI: Try running checks and build as a non-root user

.forgejo/workflows/verify.yaml

@@ -34,17 +34,20 @@ jobs:
       - name: Setup additional tooling
         run: .forgejo/workflows/setup-tools.sh
 
+      - name: Create 'test' user
+        run: useradd -m ci
+
       - name: Build
-        run: just build
+        run: just ci build
 
       - name: Format
-        run: just format-assess
+        run: just ci format-assess
       - name: Lint
-        run: just lint-assess
+        run: just ci lint-assess
       - name: Cargo check
-        run: just check
+        run: just ci check
       - name: Test
-        run: just test
+        run: just ci test
       - name: Assess test coverage
-        run: just cover-assess
+        run: just ci cover-assess
 

.justfile

@@ -433,6 +433,12 @@ default:
 choose:
     @just --choose
 
+[script, private]
+ci recipe:
+    id -u ci >/dev/null 2>&1 || useradd -m ci
+    chown -R ci:ci .
+    su ci -c "just {{ recipe }}"
+
 alias ch := choose
 
 export CARGO_TERM_COLOR := 'always'