fix(ci): refresh apt lists before installing Linux deps

The runner image ships an apt index from its build date (2026-06-24), and
cache-apt-pkgs-action's update_apt_lists_if_stale only runs under nektos/act
-- it guards on ACT=true, so on real runners it is a no-op. Its premise
("GitHub Actions runners have fresh package lists") does not hold.

Ubuntu published pipewire 1.0.5-1ubuntu3.3 and removed 3.2 from the pool, so
apt resolved a .deb that 404s. The action runs apt-fast install without
checking its exit code, so the failure was swallowed: it cached 0 packages as
a 6 KB entry, which every later run restored as a hit and then skipped the
install entirely -- leaving libglib2.0-dev absent and failing rust-check and
ts-check on every branch, including main.

Refreshing the index first makes apt resolve debs that actually exist.

Author: Mohammod Al Amin Ashik

.github/actions/install-linux-deps/action.yml

@@ -13,6 +13,16 @@ runs:
   using: composite
   steps:
     # Cache apt packages to avoid re-downloading on every run
+    # The runner image ships an apt index from its build date, and
+    # cache-apt-pkgs-action's own refresh (update_apt_lists_if_stale) is a
+    # no-op outside nektos/act -- it guards on ACT=true. A stale index names
+    # .debs that Ubuntu has since superseded and dropped from the pool, so the
+    # install 404s; the action then caches the empty result instead of failing,
+    # and every later run restores that as a hit and skips installing at all.
+    - name: Refresh apt lists
+      shell: bash
+      run: sudo apt-get update
+
     # Pinned to a SHA: `@latest` is a moving tag, so a broken upstream release
     # (e.g. v1.6.2) would otherwise roll straight into CI unreviewed.
     - name: Cache apt packages (base)