fix(ci): Set HOME=/root via docker -e flag to override GHA default

GHA hard-codes HOME=/github/home when creating the container, which
overrides our container.env setting. Using -e HOME=/root in the
container options flag takes precedence over GHA's injected value.
Firefox requires HOME to be owned by the current user (root).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: mydea

.github/workflows/build.yml

@@ -500,9 +500,7 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root
-      env:
-        HOME: /root
+      options: --ipc=host --user root -e HOME=/root
     timeout-minutes: 25
     strategy:
       fail-fast: false
@@ -606,9 +604,7 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root
-      env:
-        HOME: /root
+      options: --ipc=host --user root -e HOME=/root
     timeout-minutes: 15
     strategy:
       fail-fast: false
@@ -828,9 +824,7 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root
-      env:
-        HOME: /root
+      options: --ipc=host --user root -e HOME=/root
     timeout-minutes: 15
     strategy:
       fail-fast: false
@@ -934,9 +928,7 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root
-      env:
-        HOME: /root
+      options: --ipc=host --user root -e HOME=/root
     timeout-minutes: 15
     env:
       # We just use a dummy DSN here, only send to the tunnel anyhow
@@ -1061,9 +1053,7 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root
-      env:
-        HOME: /root
+      options: --ipc=host --user root -e HOME=/root
     timeout-minutes: 15
     env:
       E2E_TEST_AUTH_TOKEN: ${{ secrets.E2E_TEST_AUTH_TOKEN }}

.github/workflows/canary.yml

@@ -77,9 +77,7 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root
-      env:
-        HOME: /root
+      options: --ipc=host --user root -e HOME=/root
     timeout-minutes: 20
     env:
       # We just use a dummy DSN here, only send to the tunnel anyhow

.github/workflows/flaky-test-detector.yml

@@ -45,9 +45,7 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root
-      env:
-        HOME: /root
+      options: --ipc=host --user root -e HOME=/root
     timeout-minutes: 60
     name: 'Check tests for flakiness'
     # Also skip if PR is from master -> develop