fix(ci): allow baseline host pressure gate action

.gitea/workflows/cd.yaml

@@ -20,6 +20,7 @@ on:
       # Dockerfile COPY scripts/ into the API image; keep production ops
       # seed scripts deploy-coupled instead of repo-only.
       - 'scripts/backup/backup-momo-188-pg.sh'
+      - 'scripts/ci/wait-host-web-build-pressure.sh'
       - 'scripts/ops/notify-awoooi-ops.sh'
       - 'scripts/ops/awooop-seed-auto-repair-canary-playbook.py'
       # Workflow-only changes do not rebuild runtime images. Use workflow_dispatch

scripts/ci/wait-host-web-build-pressure.sh

@@ -13,8 +13,11 @@ SLEEP_SECONDS="${HOST_WEB_BUILD_PRESSURE_SLEEP_SECONDS:-${HOST_WEB_BUILD_PRESSUR
 WARN_ONLY="${HOST_WEB_BUILD_PRESSURE_WARN_ONLY:-0}"
 MAX_LOAD5_PER_CORE="${HOST_WEB_BUILD_PRESSURE_MAX_LOAD5_PER_CORE:-0.85}"
 MAX_CI_CPU_PERCENT="${HOST_WEB_BUILD_PRESSURE_MAX_CI_CPU_PERCENT:-250}"
-MAX_ACTIVE_CI_PROCESS_GROUPS="${HOST_WEB_BUILD_PRESSURE_MAX_ACTIVE_CI_PROCESS_GROUPS:-0}"
-MAX_ACTIVE_CI_CONTAINERS="${HOST_WEB_BUILD_PRESSURE_MAX_ACTIVE_CI_CONTAINERS:-0}"
+# One Gitea Actions task container/process group is the current job itself.
+# Block only when there is additional CI/BuildKit pressure unless explicitly
+# tightened by the runner environment.
+MAX_ACTIVE_CI_PROCESS_GROUPS="${HOST_WEB_BUILD_PRESSURE_MAX_ACTIVE_CI_PROCESS_GROUPS:-1}"
+MAX_ACTIVE_CI_CONTAINERS="${HOST_WEB_BUILD_PRESSURE_MAX_ACTIVE_CI_CONTAINERS:-1}"
 MAX_ORPHAN_BROWSER_GROUPS="${HOST_WEB_BUILD_PRESSURE_MAX_ORPHAN_BROWSER_GROUPS:-0}"
 METRICS_FILE="${HOST_RUNAWAY_PROCESS_METRICS_FILE:-${HOST_WEB_BUILD_PRESSURE_METRICS_FILE:-/home/wooo/node_exporter_textfiles/host_runaway_process.prom}}"
 EXPORTER="${HOST_RUNAWAY_PROCESS_EXPORTER:-/home/wooo/scripts/host-runaway-process-exporter.py}"