Do you do OCI/container builds inside your forgejo-runner container?
(Should live at https://forgejo.org/docs/v12.0/admin/actions/docker-access/ once it is finished up, if anyone runs into the comment after the draft is gone.)
I'm using dind too, but this requires privileged runners...