Harden CI by avoiding self-hosted runners on PR workflow

.github/workflows/tests.yml

@@ -7,8 +7,7 @@ on:
 jobs:
   unit:
     name: Unit (required)
-    # Match the labels exposed by the Coolify-managed GitHub runner.
-    runs-on: [self-hosted, Linux, X64, default]
+    runs-on: ubuntu-latest
 
     steps:
       - name: Checkout
@@ -71,7 +70,7 @@ jobs:
 
   edge-agent:
     name: Edge Agent (required)
-    runs-on: [self-hosted, Linux, X64, default]
+    runs-on: ubuntu-latest
 
     steps:
       - name: Checkout
@@ -94,7 +93,7 @@ jobs:
 
   edge-broker:
     name: Edge Broker (required)
-    runs-on: [self-hosted, Linux, X64, default]
+    runs-on: ubuntu-latest
 
     steps:
       - name: Checkout
@@ -139,7 +138,7 @@ jobs:
 
   edge-gateway-backend:
     name: Edge Gateway Backend (required)
-    runs-on: [self-hosted, Linux, X64, default]
+    runs-on: ubuntu-latest
     env:
       COMPOSE_FILE: docker-compose.yml:.github/docker-compose.ci.yml
       TRAEFIK_WEB_PORT: "18080"
@@ -248,7 +247,7 @@ jobs:
 
   integration:
     name: Integration (advisory)
-    runs-on: [self-hosted, Linux, X64, default]
+    runs-on: ubuntu-latest
     continue-on-error: true
 
     steps:
@@ -290,7 +289,7 @@ jobs:
 
   api:
     name: API (advisory)
-    runs-on: [self-hosted, Linux, X64, default]
+    runs-on: ubuntu-latest
     continue-on-error: true
 
     steps: