fix(ci): join control planes to the runner network

.gitea/workflows/test.yml

@@ -100,14 +100,17 @@ jobs:
         run: |
           set -euo pipefail
           # act_runner executes this job in a container while sharing the host
-          # Docker socket. Reach host-published ports through the bridge gateway
+          # Docker socket. Attach control-plane siblings to the job's network,
           # and use named volumes for state the host daemon must mount.
-          DOCKER_HOST_ADDRESS=$(python3 scripts/docker_host_address.py)
-          test -n "$DOCKER_HOST_ADDRESS"
+          DOCKER_CLIENT_NETWORK=$(
+            docker inspect "$(hostname)" |
+              python3 -c 'import json,sys; n=json.load(sys.stdin)[0]["NetworkSettings"]["Networks"]; print(next(iter(n)))'
+          )
+          test -n "$DOCKER_CLIENT_NETWORK"
           RUN_KEY="${GITHUB_RUN_ID:-${GITHUB_RUN_NUMBER:-0}}"
-          export NO_PROXY="${NO_PROXY:+$NO_PROXY,}$DOCKER_HOST_ADDRESS"
-          export no_proxy="${no_proxy:+$no_proxy,}$DOCKER_HOST_ADDRESS"
-          export BOT_BOTTLE_DOCKER_HOST_ADDRESS="$DOCKER_HOST_ADDRESS"
+          export NO_PROXY="*"
+          export no_proxy="*"
+          export BOT_BOTTLE_DOCKER_CLIENT_NETWORK="$DOCKER_CLIENT_NETWORK"
           export BOT_BOTTLE_DOCKER_ROOT_MOUNT="bot-bottle-ci-root-$RUN_KEY"
           export BOT_BOTTLE_DOCKER_CA_MOUNT="bot-bottle-ci-ca-$RUN_KEY"
           python3 -m coverage run -m scripts.unittest_gate \