inkwell is now a published module (engines/inkwell v0.1.0) rather than a
sibling checkout, so a project that depends on it needs GOPRIVATE — our
forge is not proxy.golang.org and not in the public checksum database.
Set in both the builder image and the Makefile template, so it holds
whether or not the image has been rebuilt.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
builder.Dockerfile bakes the build step's dependencies into
git.teletype.hu/internal/* so the pipeline no longer installs
packages on every run.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>