Build package in isolated runner environment

.gitea/workflows/publish.yml

@@ -28,7 +28,10 @@ jobs:
         run: python3 --version
 
       - name: Instalar herramientas
-        run: python3 -m pip install --upgrade "build>=1,<2" "twine>=6,<7"
+        run: |
+          python3 -m venv .ci-venv
+          .ci-venv/bin/python -m pip install --upgrade \
+            "build>=1,<2" "twine>=6,<7"
 
       - name: Comprobar credenciales
         env:
@@ -39,7 +42,7 @@ jobs:
         env:
           PACKAGE_VERSION: 8.0.${{ gitea.run_number }}
         run: |
-          python3 - <<'PY'
+          .ci-venv/bin/python - <<'PY'
           from pathlib import Path
           import os, re
           path = Path('tryton.cfg')
@@ -50,14 +53,14 @@ jobs:
 
       - name: Construir y validar
         run: |
-          python3 -m build
-          python3 -m twine check dist/*
+          .ci-venv/bin/python -m build
+          .ci-venv/bin/python -m twine check dist/*
 
       - name: Publicar en Gitea PyPI
         env:
           TWINE_USERNAME: unpaismejor
           TWINE_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
         run: |
-          python3 -m twine upload --non-interactive \
+          .ci-venv/bin/python -m twine upload --non-interactive \
             --repository-url https://code.unpaismejor.org.do/api/packages/tryton-do/pypi \
             dist/*