fix(ci): 优化Worker基础镜像缓存策略 - 本地命中秒过 + 构建后推送registry\n\n- 新增本地镜像检查：docker image inspect优先，命中即秒过\n- 新增构建后推送：fallback构建成功后自动推到Gitea registry\n- 三级缓存：本地宿主机 > Gitea registry > 本地重新构建\n- DooD模式下8个runner共享宿主机daemon，首次构建后全部复用

.gitea/workflows/ci-pipeline.yml

@@ -633,56 +633,69 @@ jobs:
         REGISTRY="git.xiaoxiajianji.com/xiaoxia-saas"
         BASE_BUILDER="${REGISTRY}/worker-base-builder:latest"
         BASE_RUNTIME="${REGISTRY}/worker-base-runtime:latest"
-        
-        # 尝试拉取基础镜像
-        echo "检查基础镜像..."
-        if docker pull "$BASE_BUILDER" 2>/dev/null && docker pull "$BASE_RUNTIME" 2>/dev/null; then
-          echo "基础镜像已存在，使用远程镜像"
-          echo "fallback=false" >> $GITHUB_OUTPUT
-        else
-          echo "基础镜像不存在，本地构建（fallback模式）..."
-          
-          # 构建builder基础镜像
-          echo "构建 worker-base-builder..."
-          # 用buildx docker-container驱动构建（兼容DooD模式：普通docker build看不到容器内文件）
-          BUILDER_NAME="ci-pr-builder-${GITHUB_RUN_ID:-local}"
-          if ! docker buildx inspect "$BUILDER_NAME" > /dev/null 2>&1; then
-            docker buildx create --use --name "$BUILDER_NAME" --driver docker-container
-          else
-            docker buildx use "$BUILDER_NAME"
-          fi
-          docker buildx inspect --bootstrap > /dev/null 2>&1
-          
-          # 构建builder基础镜像（带重试，buildx容器偶发不稳定）
-          echo "构建 worker-base-builder..."
-          for attempt in 1 2 3; do
-            if docker buildx build --load -f infra/docker/worker-base-builder.Dockerfile -t "$BASE_BUILDER" .; then
-              echo "worker-base-builder 构建成功"
-              break
-            fi
-            echo "worker-base-builder 构建失败，重试 $attempt/3..."
-            docker buildx rm "$BUILDER_NAME" 2>/dev/null || true
-            docker buildx create --use --name "$BUILDER_NAME" --driver docker-container
-            sleep 3
-          done
-          
-          # 构建runtime基础镜像
-          echo "构建 worker-base-runtime..."
-          for attempt in 1 2 3; do
-            if docker buildx build --load -f infra/docker/worker-base-runtime.Dockerfile -t "$BASE_RUNTIME" .; then
-              echo "worker-base-runtime 构建成功"
-              break
-            fi
-            echo "worker-base-runtime 构建失败，重试 $attempt/3..."
-            docker buildx rm "$BUILDER_NAME" 2>/dev/null || true
-            docker buildx create --use --name "$BUILDER_NAME" --driver docker-container
-            sleep 3
-          done
-          
+
+        # 1. 先检查本地是否已有镜像（DooD模式下宿主机daemon共享，命中即秒过）
+        echo "检查本地基础镜像..."
+        if docker image inspect "$BASE_BUILDER" > /dev/null 2>&1 \
+           && docker image inspect "$BASE_RUNTIME" > /dev/null 2>&1; then
+          echo "本地已存在基础镜像，直接复用"
           echo "fallback=true" >> $GITHUB_OUTPUT
-          echo "基础镜像本地构建完成"
+          exit 0
         fi
 
+        # 2. 本地没有，尝试从registry拉取
+        echo "本地无缓存，尝试拉取基础镜像..."
+        if docker pull "$BASE_BUILDER" 2>/dev/null && docker pull "$BASE_RUNTIME" 2>/dev/null; then
+          echo "基础镜像拉取成功"
+          echo "fallback=false" >> $GITHUB_OUTPUT
+          exit 0
+        fi
+
+        # 3. 拉取失败，本地构建（fallback模式）
+        echo "基础镜像不存在，本地构建..."
+
+        BUILDER_NAME="ci-pr-builder-${GITHUB_RUN_ID:-local}"
+        if ! docker buildx inspect "$BUILDER_NAME" > /dev/null 2>&1; then
+          docker buildx create --use --name "$BUILDER_NAME" --driver docker-container
+        else
+          docker buildx use "$BUILDER_NAME"
+        fi
+        docker buildx inspect --bootstrap > /dev/null 2>&1
+
+        # 构建builder基础镜像（带重试）
+        echo "构建 worker-base-builder..."
+        for attempt in 1 2 3; do
+          if docker buildx build --load -f infra/docker/worker-base-builder.Dockerfile -t "$BASE_BUILDER" .; then
+            echo "worker-base-builder 构建成功"
+            break
+          fi
+          echo "worker-base-builder 构建失败，重试 $attempt/3..."
+          docker buildx rm "$BUILDER_NAME" 2>/dev/null || true
+          docker buildx create --use --name "$BUILDER_NAME" --driver docker-container
+          sleep 3
+        done
+
+        # 构建runtime基础镜像
+        echo "构建 worker-base-runtime..."
+        for attempt in 1 2 3; do
+          if docker buildx build --load -f infra/docker/worker-base-runtime.Dockerfile -t "$BASE_RUNTIME" .; then
+            echo "worker-base-runtime 构建成功"
+            break
+          fi
+          echo "worker-base-runtime 构建失败，重试 $attempt/3..."
+          docker buildx rm "$BUILDER_NAME" 2>/dev/null || true
+          docker buildx create --use --name "$BUILDER_NAME" --driver docker-container
+          sleep 3
+        done
+
+        # 4. 构建成功后推送到registry，供后续job/runner复用
+        echo "推送基础镜像到registry供后续复用..."
+        docker push "$BASE_BUILDER" 2>/dev/null || echo "push builder失败（不影响构建）"
+        docker push "$BASE_RUNTIME" 2>/dev/null || echo "push runtime失败（不影响构建）"
+
+        echo "fallback=true" >> $GITHUB_OUTPUT
+        echo "基础镜像本地构建完成"
+
     - name: Build PR image (verify only, no push)
       shell: sh
       run: |