Introduce CI container and optimize workflows

- Added `.ci/container/Dockerfile` based on Ubuntu 24.04 with Java 8-25, Android SDK, and build tools.
- Added `.github/workflows/build-container.yml` to build and push the container image.
- Updated `.github/workflows/pr.yml`, `ant.yml`, `scripts-android.yml`, `parparvm-tests.yml` to use the new container.
- Updated `scripts/setup-workspace.sh` to respect `CN1_BINARIES` and skip updates if needed.
- Optimized dependencies installation by using pre-installed tools in the container.

Author: google-labs-jules[bot]

.ci/container/Dockerfile

@@ -46,13 +46,14 @@ RUN mkdir -p /usr/lib/jvm && \
     rm /tmp/zulu8.tar.gz
 
 # Install other JDKs via apt
-# Note: zulu25-jdk might be available. If not, this step might fail.
-# If it fails, we will have to adjust. But the user implies availability.
 RUN apt-get install -y \
     zulu11-jdk \
     zulu17-jdk \
-    zulu21-jdk \
-    zulu25-jdk || echo "zulu25-jdk install failed, proceeding without it"
+    zulu21-jdk
+
+# Note: zulu25-jdk might be available. If not, this step might fail.
+# If it fails, we will have to adjust. But the user implies availability.
+RUN apt-get install -y zulu25-jdk || echo "zulu25-jdk install failed, proceeding without it"
 
 # Android SDK
 ENV ANDROID_HOME=/usr/lib/android-sdk

.github/workflows/ant.yml

@@ -7,6 +7,10 @@ on:
     paths-ignore:
       - 'CodenameOneDesigner/**'
 
+permissions:
+  contents: read
+  packages: read
+
 jobs:
   build-linux-jdk8:
 

.github/workflows/parparvm-tests.yml

@@ -15,6 +15,10 @@ on:
       - '!vm/**/readme.md'
       - '!vm/**/docs/**'
 
+permissions:
+  contents: read
+  packages: read
+
 jobs:
   vm-tests:
     runs-on: ubuntu-latest

.github/workflows/pr.yml

@@ -32,6 +32,7 @@ permissions:
   contents: write
   pull-requests: write
   issues: write
+  packages: read
 
 jobs:
   build-test:
@@ -58,6 +59,8 @@ jobs:
       run: |
         if [ "${{ matrix.java-version }}" == "8" ]; then
           echo "JAVA_HOME=$JAVA8_HOME" >> $GITHUB_ENV
+        elif [ "${{ matrix.java-version }}" == "11" ]; then
+          echo "JAVA_HOME=$JAVA11_HOME" >> $GITHUB_ENV
         elif [ "${{ matrix.java-version }}" == "17" ]; then
           echo "JAVA_HOME=$JAVA17_HOME" >> $GITHUB_ENV
         elif [ "${{ matrix.java-version }}" == "21" ]; then

.github/workflows/scripts-android.yml

@@ -89,6 +89,7 @@ jobs:
       contents: read
       pull-requests: write
       issues: write
+      packages: read
     runs-on: ubuntu-latest
     container:
       image: ghcr.io/codenameone/codenameone/ci-container:latest
@@ -107,7 +108,10 @@ jobs:
         if: matrix.id != 'default'
         run: |
           # Map matrix.java_version to container env vars
-          if [ "${{ matrix.java_version }}" == "17" ]; then
+          if [ "${{ matrix.java_version }}" == "11" ]; then
+            echo "JDK_HOME=$JAVA11_HOME" >> $GITHUB_ENV
+            echo "JAVA_HOME=$JAVA11_HOME" >> $GITHUB_ENV
+          elif [ "${{ matrix.java_version }}" == "17" ]; then
             echo "JDK_HOME=$JAVA17_HOME" >> $GITHUB_ENV
             echo "JAVA_HOME=$JAVA17_HOME" >> $GITHUB_ENV
           elif [ "${{ matrix.java_version }}" == "21" ]; then