Strip fsync=0 mountopt (fuse-only flag) so kernel overlay mounts succeed

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

.forgejo/workflows/build.yml

@@ -55,7 +55,9 @@ jobs:
               # Use the fast kernel overlay driver instead of fuse-overlayfs
               # (we are privileged, so this works — and is ~50x faster on
               # the millions of small files in the OSTree base)
-              sed -i "s|^mount_program|#mount_program|" /etc/containers/storage.conf || true
+              sed -i -E -e "s|^[[:space:]]*mount_program|#mount_program|" \
+                        -e "s|^[[:space:]]*mountopt.*|mountopt = \"nodev\"|" \
+                /etc/containers/storage.conf || true
               mkdir -p /src && tar -xf - -C /src && cd /src
               buildah build -f Containerfile \
                 --build-arg BASE_IMAGE="$BASE_IMAGE" \