fix(ci): move ca-certificates test to Alpine E2E job

Move the TLS negative test from test-standalone-install.yml to the
"Run E2E in Alpine container" step in ci.yml, which is the proper
place to test vp runtime behavior on Alpine.

Author: fengmk2

.github/workflows/ci.yml

@@ -638,6 +638,17 @@ jobs:
               which npm
               node --version
 
+              # Verify vp requires ca-certificates for TLS (rustls-platform-verifier reads OS cert store).
+              # Remove the cert bundle, then try to download a Node.js version not yet cached.
+              rm -f /etc/ssl/certs/ca-certificates.crt
+              if vp env run --node 23 -- node -e 'process.exit(0)' 2>&1; then
+                echo 'Error: vp should fail without ca-certificates'
+                exit 1
+              fi
+              echo 'Confirmed: vp HTTPS fails without ca-certificates (expected)'
+              # Restore certs for remaining tests
+              apk fix --no-cache ca-certificates-bundle
+
               # Test global package install
               vp install -g typescript
               tsc --version

.github/workflows/test-standalone-install.yml

@@ -254,17 +254,6 @@ jobs:
               vp env doctor
               vp env run --node 24 -- node -p \"process.versions\"
 
-              # Verify vp requires ca-certificates for TLS (rustls-platform-verifier reads OS cert store).
-              # Remove the cert bundle, then try to download a Node.js version not yet cached.
-              rm -f /etc/ssl/certs/ca-certificates.crt
-              if vp env run --node 23 -- node -e 'process.exit(0)' 2>&1; then
-                echo 'Error: vp should fail without ca-certificates'
-                exit 1
-              fi
-              echo 'Confirmed: vp HTTPS fails without ca-certificates (expected)'
-              # Restore certs for remaining tests
-              apk fix --no-cache ca-certificates-bundle
-
               # Test create command
               vp create vite --no-interactive --no-agent -- hello --no-interactive -t vanilla
               cd hello && vp run build && vp --version