Same fix as qa-required.yaml — css-contract-check.sh calls rg on
the host runner, not inside Docker.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
CSS/docs/JS contract checks call rg directly on the host runner,
not inside Docker, so ripgrep must be present on the ubuntu runner.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>