Actions: podman without remote flag

```

```

.forgejo/workflows/publish.yaml

@@ -0,0 +1,36 @@
+name: build and publish containers
+
+on:
+  push:
+    branches:
+      - main
+  schedule:
+    - cron: "0 0 * * 1,3,5"
+
+jobs:
+  build:
+    runs-on: nixos-latest
+    strategy: &strategy
+      matrix:
+        container: [ nixos ]
+        version: [ "24.11", "unstable" ]
+    steps:
+      - name: pre-requisites
+        run: |
+          nix-env -iA nixpkgs.docker nixpkgs.podman nixpkgs.nodejs_20 nixpkgs.gnused nixpkgs.coreutils && mkdir -p ~/.config/nix && echo "experimental-features = nix-command flakes" > ~/.config/nix/nix.conf
+      - name: checkout
+        uses: actions/checkout@v4
+        with:
+          ref: 'main'
+      - name: nix package names
+        id: pkgs
+        run: |
+          echo "pkgs-name=${{ matrix.container }}-${{ matrix.version }}" | tr -d . >>"${GITHUB_OUTPUT}"
+      - name: build
+        uses: actions/nix/build@main
+        with:
+          package: ${{ steps.pkgs.outputs.pkgs-name }}
+          out-link: ${{ steps.pkgs.outputs.pkgs-name }}
+      - name: load image into podman
+        run: |
+          podman load < ${{ steps.pkgs.outputs.pkgs-name }}

.forgejo/workflows/update.yaml

@@ -0,0 +1,19 @@
+name: scheduled flake.lock update
+on:
+  schedule:
+    - cron: "0 0 * * 0,2,4"
+  workflow_dispatch: {}
+
+jobs:
+  flake-lock-update:
+    runs-on: nixos-latest
+    steps:
+      - run: nix-env -iA nixpkgs.nodejs_20 nixpkgs.gnused nixpkgs.coreutils
+      - run: mkdir -p ~/.config/nix && echo "experimental-features = nix-command flakes" > ~/.config/nix/nix.conf
+      - uses: actions/checkout@v4
+        with:
+          ref: 'main'
+      - uses: actions/nix-flake-update-pr.git@main
+        with:
+          token: ${{ secrets.FORGEJO_PR_TOKEN }}
+          author-email: flake@flyinggecko.org