Move activitypub automated test to run under a container

test/automated/activitypub/Dockerfile

@@ -0,0 +1,36 @@
+FROM golang:1.25-bookworm
+
+RUN apt-get update && apt-get install -y \
+    gcc make \
+    curl libcurl4-openssl-dev libssl-dev \
+    jq sqlite3 ffmpeg \
+    libnss3-tools \
+    lsof procps \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install mkcert (architecture-aware)
+RUN ARCH="$(dpkg --print-architecture)" && \
+    curl -sL "https://github.com/FiloSottile/mkcert/releases/download/v1.4.4/mkcert-v1.4.4-linux-${ARCH}" -o /usr/local/bin/mkcert && \
+    chmod +x /usr/local/bin/mkcert
+
+# Install Caddy (architecture-aware)
+RUN ARCH="$(dpkg --print-architecture)" && \
+    curl -sL "https://github.com/caddyserver/caddy/releases/download/v2.8.4/caddy_2.8.4_linux_${ARCH}.tar.gz" | tar -xz -C /usr/local/bin caddy
+
+# Build and install snac2
+RUN git clone --depth 1 https://codeberg.org/grunfink/snac2.git /tmp/snac2-src \
+    && cd /tmp/snac2-src && make && cp snac /usr/local/bin/snac \
+    && rm -rf /tmp/snac2-src
+
+# Install mkcert CA into system trust store so snac2 trusts the test certs
+RUN mkcert -install
+
+# Allow git operations on the mounted repo
+RUN git config --global --add safe.directory /owncast
+
+WORKDIR /owncast
+
+COPY entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+ENTRYPOINT ["/entrypoint.sh"]