fix(ci): restore Docker image builds

Replace the obsolete Debian GL package in the CPU image and copy README.md into metadata-only Docker build contexts so Hatchling editable installs can validate package metadata.

Co-authored-by: Codex <codex@users.noreply.github.com>

Author: MiaoDX

Dockerfile

@@ -13,7 +13,7 @@ FROM python:3.12-slim
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
         libosmesa6-dev \
-        libgl1-mesa-glx \
+        libgl1 \
         git \
     && rm -rf /var/lib/apt/lists/*
 
@@ -26,6 +26,7 @@ ENV UV_SYSTEM_PYTHON=1
 # Copy only dependency metadata first (for layer caching)
 WORKDIR /opt/roboharness
 COPY pyproject.toml .
+COPY README.md .
 RUN mkdir -p src/roboharness && \
     echo '__version__ = "0.0.0"' > src/roboharness/__init__.py
 

Dockerfile.gpu

@@ -33,6 +33,7 @@ ENV UV_SYSTEM_PYTHON=1
 # Copy only dependency metadata first (for layer caching)
 WORKDIR /opt/roboharness
 COPY pyproject.toml .
+COPY README.md .
 RUN mkdir -p src/roboharness && \
     echo '__version__ = "0.0.0"' > src/roboharness/__init__.py
 

tests/contract/test_dockerfiles.py

@@ -0,0 +1,27 @@
+"""Contract tests for CI Docker image definitions."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+REPO_ROOT = Path(__file__).resolve().parents[2]
+
+
+def _dockerfile(name: str) -> str:
+    return (REPO_ROOT / name).read_text()
+
+
+def test_cpu_dockerfile_uses_current_debian_gl_package() -> None:
+    dockerfile = _dockerfile("Dockerfile")
+
+    assert "libgl1-mesa-glx" not in dockerfile
+    assert "libgl1" in dockerfile
+
+
+def test_dockerfiles_copy_readme_before_editable_install() -> None:
+    for name in ("Dockerfile", "Dockerfile.gpu"):
+        dockerfile = _dockerfile(name)
+        readme_index = dockerfile.index("COPY README.md .")
+        install_index = dockerfile.index('RUN uv pip install -e "')
+
+        assert readme_index < install_index