The job runs in node:20-bookworm which ships no docker binary (run 21 died with 'Unable to locate executable file: docker'). Install static docker client + buildx, and fail fast with an actionable error if the runner has not mounted the docker socket.