Restored Docker-in-Docker for CI jobs on Tuist runners

Restored Docker availability for CI jobs that run on Tuist runners. The runner fleet was temporarily unable to provide Docker-in-Docker sidecars after a controller update, causing jobs that use service containers to fail at the Initialize containers step. This release rolls the active runners-controller back to the known-good 0.7.0 pod template so Docker sockets come up reliably again. The follow-up revert of the registry-mirror flag has also landed, preventing the same broken controller from being released again.