Running buildah in forgejo-runner

I've been trying to get buildah working in forgejo-runner for building container images on CI, and it's been a frustrating process. There are some posts around the web about this, but nothing that sums up a working solution that doesn't simply disable all security measures. I eventually pieced it together with a lot of trial and error, so here's a summary to hopefully save somebody else (or me in…