wip: ci: run in kubernetes

ci/podTemplate.yaml

@@ -11,6 +11,9 @@ spec:
     securityContext:
       readOnlyRootFilesystem: true
       privileged: true
+    volumeMounts:
+    - name: tmp
+      mountPath: /tmp
   - name: publish
     image: registry.fedoraproject.org/fedora
     command:
@@ -19,3 +22,7 @@ spec:
     securityContext:
       readOnlyRootFilesystem: true
       runAsUser: 1000
+  volumes:
+  - name: tmp
+    emptyDir:
+      medium: Memory