Jobs run pinned source from GitHub
Jobs now materialize source.git through a Ready GitHub Connection in the same
project. Nodus pins the commit and archive before placement, so retries use the
same source files. The optional checkout path is respected, and repository tokens
stay outside the guest. Missing access and unsafe or oversized archives prevent
the command from starting.