Use GitHub-hosted runners on every workflow

Drops the self-hosted runner-02 default. With no self-hosted runner registered
on the repo, workflows now run reliably on ubuntu-latest without needing a
RUNS_ON repo variable override.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.github/workflows/docs.yml

@@ -20,7 +20,7 @@ concurrency:
 
 jobs:
   build:
-    runs-on: ${{ fromJSON(vars.RUNS_ON || '["self-hosted","runner-02"]') }}
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -55,7 +55,7 @@ jobs:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
     needs: build
-    runs-on: ${{ fromJSON(vars.RUNS_ON || '["self-hosted","runner-02"]') }}
+    runs-on: ubuntu-latest
     steps:
       - name: Deploy to GitHub Pages
         id: deployment

.github/workflows/test_apache_docker.yml

@@ -13,7 +13,7 @@ on:
 
 jobs:
   validate-waf-patterns:
-    runs-on: ${{ fromJSON(vars.RUNS_ON || '["self-hosted","runner-02"]') }}
+    runs-on: ubuntu-latest
 
     steps:
     - name: Checkout repository

.github/workflows/test_nginx.yml

@@ -13,7 +13,7 @@ on:
 
 jobs:
   validate-nginx-configuration:
-    runs-on: ${{ fromJSON(vars.RUNS_ON || '["self-hosted","runner-02"]') }}
+    runs-on: ubuntu-latest
 
     steps:
     - name: Checkout repository

.github/workflows/update_patterns.yml

@@ -13,7 +13,7 @@ on:
 
 jobs:
   update-owasp-waf:
-    runs-on: ${{ fromJSON(vars.RUNS_ON || '["self-hosted","runner-02"]') }}
+    runs-on: ubuntu-latest
 
     steps:
     - name: 🚚 Checkout Repository

README.md

@@ -195,7 +195,7 @@ The default list blocks SEO crawlers, AI training bots, and known scanners while
 | [`test_apache_docker.yml`](.github/workflows/test_apache_docker.yml) | On PR | Validate generated Apache rules against ModSecurity in Docker |
 | [`docs.yml`](.github/workflows/docs.yml) | On `docs/` change | Build and deploy the VitePress docs to GitHub Pages |
 
-All workflows target the **`runner-02`** self-hosted runner by default, with an automatic fallback to GitHub-hosted runners by setting the repository variable `RUNS_ON` to `'["ubuntu-latest"]'`.
+All workflows run on **GitHub-hosted runners** (`ubuntu-latest`).
 
 ## Documentation