Исправлен Version: IMAGE_VERSION/RELEASE_TAG без git в DinD (dubious ownership).

Co-authored-by: Cursor <cursoragent@cursor.com>

Jenkinsfile

@@ -29,7 +29,7 @@ pipeline {
         HARBOR_REGISTRY   = 'hub.antropoff.ru'
         HARBOR_IMAGE      = 'hub.antropoff.ru/devops-tools/wrapped'
         DOCKERHUB_IMAGE   = 'inecs/wrapped'
-        RELEASE_TAG       = "${env.GIT_COMMIT?.take(7) ?: 'dev'}"
+        // RELEASE_TAG — после checkout (с agent none GIT_COMMIT ещё нет → валидация env падает)
         BUILDX_BUILDER    = "jenkins-wrapped-${env.BUILD_NUMBER}"
         DEPLOY_JOB        = 'devops-tools/wrapped/wrapped-deploy/main'
         TZ                = 'Europe/Moscow'
@@ -53,17 +53,18 @@ pipeline {
 
                 stage('Version') {
                     steps {
-                        container('docker') {
                         script {
-                                env.IMAGE_VERSION = sh(
+                            // Без git в DinD-контейнере: dubious ownership → exit 128
-                                    script: "tr -d '[:space:]' < VERSION",
+                            env.IMAGE_VERSION = readFile('VERSION').trim()
-                                    returnStdout: true
-                                ).trim()
                             if (!env.IMAGE_VERSION) {
                                 error('VERSION file is empty')
                             }
-                                echo "IMAGE_VERSION from VERSION → ${env.IMAGE_VERSION}"
+                            if (!env.GIT_COMMIT) {
+                                error('GIT_COMMIT is empty after checkout')
                             }
+                            env.RELEASE_TAG = env.GIT_COMMIT.take(7)
+                            echo "IMAGE_VERSION from VERSION → ${env.IMAGE_VERSION}"
+                            echo "RELEASE_TAG → ${env.RELEASE_TAG}"
                         }
                     }
                 }