fix(ci): add safe.directory config for git in container

Git requires directories to be marked as safe when running as root
with mounted volumes. This allows the download-libs.sh script to
properly detect the clp-ffi-go submodule commit hash.

Author: jackluo923

.github/workflows/build.yaml

@@ -33,6 +33,10 @@ jobs:
             # Install git (required for download-libs.sh to detect commit hash)
             yum install -y git
 
+            # Mark directories as safe for git (required when running as root in container)
+            git config --global --add safe.directory /src
+            git config --global --add safe.directory /src/third-party/clp-ffi-go
+
             # Install Go
             curl -fsSL "https://go.dev/dl/go1.24.3.linux-${{ matrix.arch }}.tar.gz" | tar -C /usr/local -xz
             export PATH="/usr/local/go/bin:$PATH"