feat(ci): build using podman for zstd:chunked and only build changed containers

containers/fedora/Containerfile

@@ -11,7 +11,7 @@ RUN dnf update -y && \
 # === setup user ===
 RUN useradd -ms /bin/bash user && \
   echo 'user ALL=NOPASSWD: ALL' > /etc/sudoers && \
-  install -d -o user -g user /run/user/1000 /home/user/.config /home/user/.local /home/user/.cache
+  install -m 0700 -d -o user -g user /run/user/1000 /home/user/.config /home/user/.local /home/user/.cache
 
 USER user
 WORKDIR /home/user

containers/go/Containerfile

@@ -2,6 +2,6 @@ ARG TAG
 FROM git.plabble.org/job79/fedora:${TAG}
 USER root
 
-RUN dnf -y install go && dnf clean all
+RUN dnf -y install go
 
 USER user