🐛 fix(ci): isolate gitea workflow repos

use a fresh per-job checkout directory for test, standards, and
thirdparty update workflows instead of reusing a shared repo path.

align the Gitea standards-check template with the same isolation
strategy and expand workflow bootstrap regression coverage.

tests/test_gitea_workflow_bootstrap.py

@@ -5,6 +5,10 @@ from pathlib import Path
 ROOT = Path(__file__).resolve().parents[1]
 TEST_WORKFLOW = ROOT / ".gitea" / "workflows" / "test.yml"
 STANDARDS_WORKFLOW = ROOT / ".gitea" / "workflows" / "standards-check.yml"
+UPDATE_THIRDPARTY_WORKFLOW = ROOT / ".gitea" / "workflows" / "update-thirdparty-skills.yml"
+TEMPLATE_STANDARDS_WORKFLOW = (
+    ROOT / "templates" / "ci" / "gitea" / ".gitea" / "workflows" / "standards-check.yml"
+)
 
 
 class GiteaWorkflowBootstrapTests(unittest.TestCase):
@@ -13,10 +17,27 @@ class GiteaWorkflowBootstrapTests(unittest.TestCase):
             text = workflow.read_text(encoding="utf-8")
             with self.subTest(workflow=workflow.name):
                 self.assertNotIn("bash .gitea/ci/prepare_repo.sh", text)
-                self.assertIn('REPO_DIR="${WORKSPACE_DIR}/${REPO_NAME}"', text)
                 self.assertIn('git clone "$REPO_URL" "$REPO_DIR"', text)
                 self.assertIn('echo "REPO_DIR=$REPO_DIR" >> "$GITHUB_ENV"', text)
 
+    def test_workflows_use_isolated_repo_dirs_per_job(self):
+        for workflow in (
+            TEST_WORKFLOW,
+            STANDARDS_WORKFLOW,
+            UPDATE_THIRDPARTY_WORKFLOW,
+            TEMPLATE_STANDARDS_WORKFLOW,
+        ):
+            text = workflow.read_text(encoding="utf-8")
+            with self.subTest(workflow=workflow.name):
+                self.assertNotIn('REPO_DIR="${WORKSPACE_DIR}/${REPO_NAME}"', text)
+                self.assertNotIn('REPO_DIR="${{ env.WORKSPACE_DIR }}/$REPO_NAME"', text)
+                self.assertIn('mktemp -d', text)
+                self.assertTrue(
+                    'mkdir -p "$WORKSPACE_DIR"' in text
+                    or 'mkdir -p "${{ env.WORKSPACE_DIR }}"' in text
+                )
+                self.assertIn('echo "REPO_DIR=$REPO_DIR" >>', text)
+
 
 if __name__ == "__main__":
     unittest.main()