fix(ci): use xtradeb PPA for native chromium (full KLZ pattern)

.gitea/workflows/deploy.yml

@@ -455,7 +455,19 @@ jobs:
           PUPPETEER_EXECUTABLE_PATH: /usr/bin/chromium
         run: |
           # Install system Chromium + dependencies (KLZ pattern)
-          sudo apt-get update && sudo apt-get install -y chromium libnss3 libatk1.0-0 libatk-bridge2.0-0 libcups2 libdrm2 libxkbcommon0 libxcomposite1 libxdamage1 libxrandr2 libgbm1 libasound2t64
+          # Ubuntu's default 'chromium' is a snap wrapper, so we use xtradeb PPA for native binary
+          sudo apt-get update && sudo apt-get install -y gnupg wget ca-certificates
+
+          # Setup xtradeb PPA for native chromium
+          CODENAME=$(. /etc/os-release && echo $VERSION_CODENAME)
+          sudo mkdir -p /etc/apt/keyrings
+          wget -qO- "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x82BB6851C64F6880" | sudo gpg --dearmor -o /etc/apt/keyrings/xtradeb.gpg || true
+          echo "deb [signed-by=/etc/apt/keyrings/xtradeb.gpg] http://ppa.launchpad.net/xtradeb/apps/ubuntu $CODENAME main" | sudo tee /etc/apt/sources.list.d/xtradeb-ppa.list
+          printf "Package: *\nPin: release o=LP-PPA-xtradeb-apps\nPin-Priority: 1001\n" | sudo tee /etc/apt/preferences.d/xtradeb
+
+          sudo apt-get update
+          sudo apt-get install -y --allow-downgrades chromium libnss3 libatk1.0-0 libatk-bridge2.0-0 libcups2 libdrm2 libxkbcommon0 libxcomposite1 libxdamage1 libxrandr2 libgbm1 libasound2t64
+
           [ -f /usr/bin/chromium ] && sudo ln -sf /usr/bin/chromium /usr/bin/google-chrome
           pnpm --filter @mintel/web check:forms