ci fix

.gitea/workflows/ci.yml

@@ -60,7 +60,17 @@ jobs:
         uses: actions/checkout@v4
       
       - name: Install dependencies
-        run: nix develop --quiet --command bash -c "cd frontend && npm ci --prefer-offline"
+        run: |
+          # Copy frontend to /tmp to avoid noexec issues with DynamicUser
+          cp -r frontend /tmp/frontend-build
+          # Install dependencies in executable location
+          nix develop --quiet --command bash -c "
+            cd /tmp/frontend-build
+            npm ci --prefer-offline --no-audit
+          "
+          # Copy node_modules back to workspace
+          cp -r /tmp/frontend-build/node_modules frontend/
+          rm -rf /tmp/frontend-build
       
       - name: Run frontend linting
         run: nix run .#lint-frontend