Builds location gitlab

Podman rootless makes the /builds directory owned by UID 0 Therefore, hugo can't create a lockfile (run as some unpriviledged user) It can also not build there. For some additional discussion: https://gitlab.torproject.org/tpo/tpa/team/-/issues/40499

Merge !6 first