ci: run headless Chrome without sandbox in root runner

.gitea/workflows/CI.yml

@@ -65,6 +65,6 @@ jobs:
           install-dependencies: true
       - run: npm ci
       - name: Run tests
-        run: npm run test
+        run: npm run test -- --browsers=ChromeHeadlessNoSandbox
         env:
           CHROME_BIN: ${{ steps.setup-chrome.outputs.chrome-path }}