feat(container): publish findings service and distribute workflow runner

.github/workflows/container-ci.yml

@@ -11,6 +11,7 @@ on:
       - compose.yaml
       - compose.apparmor.yaml
       - compose.findings.yaml
+      - compose.runner.yaml
       - docker/**
       - plugins/codex-security/**
       - sdk/typescript/**
@@ -23,6 +24,7 @@ on:
       - compose.yaml
       - compose.apparmor.yaml
       - compose.findings.yaml
+      - compose.runner.yaml
       - docker/**
       - plugins/codex-security/**
       - sdk/typescript/**
@@ -109,6 +111,8 @@ jobs:
           bun-version: "1.3.14"
 
       - name: Verify findings service and persistent SQLite storage
+        env:
+          CODEX_SECURITY_IMAGE: codex-security:ci
         run: bun sdk/typescript/scripts/smoke-findings-service.ts
 
       - name: Validate hardened customer Compose configuration