Fix Ubuntu OpenJPEG provisioning (#113)

.gitea/workflows/codegen.yml

@@ -10,6 +10,7 @@ on:
       - "codegen/**"
       - "tools/codegen/**"
       - "tools/generate_*.py"
+      - "tools/install_openjpeg_2_5_4.sh"
       - "tools/check_api_coverage.py"
       - "tools/check_codegen_gate.py"
       - "tools/check_milestone_08.py"
@@ -51,6 +52,7 @@ on:
       - "codegen/**"
       - "tools/codegen/**"
       - "tools/generate_*.py"
+      - "tools/install_openjpeg_2_5_4.sh"
       - "tools/check_api_coverage.py"
       - "tools/check_codegen_gate.py"
       - "tools/check_milestone_08.py"
@@ -88,11 +90,20 @@ on:
 jobs:
   deterministic:
     runs-on: ubuntu-latest
+    env:
+      OPENJPEG_PREFIX: /tmp/metacrate-openjpeg-${{ github.run_id }}
+      PKG_CONFIG_PATH: /tmp/metacrate-openjpeg-${{ github.run_id }}/lib/pkgconfig
+      LD_LIBRARY_PATH: /tmp/metacrate-openjpeg-${{ github.run_id }}/lib
     steps:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: clippy,rustfmt
+      - name: Install audited OpenJPEG 2.5.4
+        run: |
+          sudo apt-get update
+          sudo apt-get install --yes build-essential cmake pkg-config
+          tools/install_openjpeg_2_5_4.sh "$OPENJPEG_PREFIX"
       - name: Test diagnostics and byte-identical generation
         run: cargo test -p libremetaverse-codegen
       - name: Verify vendored hashes and checked-in output