The container runtime on the laptop — the image gate (`pnpm run gate:image`) builds this site’s production image with it before any PR that touches the build lands.