Deploy / deploy (push) Failing after 27s
wasm-bindgen/wasm-opt binaries cargo-leptos downloads under XDG_CACHE_HOME ended up owned by the kernel's overflow "nobody" uid inside systemd's StateDirectory for this unit - a quirk of that specific path, not anything about our shared-cache setup (CARGO_TARGET_DIR elsewhere is owned correctly). Pointing XDG_CACHE_HOME at our own shared /var/local/leptos-cache sidesteps it; verified with a clean checkout + a from-scratch env matching the workflow's exactly.