Add diagnostics to Drone CI and fix Dockerfiles in all services

- Added debug-network step to diagnose DNS, SSL, and connectivity issues
- Added debug-dotnet-restore step to test NuGet restore in isolation
- Updated all service submodules with fixed Dockerfiles:
  * CA certificates now update before any network operations
  * Added verbose logging to dotnet restore
  * Optimized apt-get with --no-install-recommends and cache cleanup

This should resolve the NU1301 SSL certificate errors in Drone CI builds.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

.drone.yml

@@ -31,6 +31,57 @@ steps:
       - cd flea
       - git submodule update --init --recursive
 
+  - name: debug-network
+    image: alpine
+    commands:
+      - apk add --no-cache bind-tools curl ca-certificates
+      - echo "=== System Info ==="
+      - cat /etc/os-release
+      - echo ""
+      - echo "=== DNS Configuration ==="
+      - cat /etc/resolv.conf
+      - echo ""
+      - echo "=== DNS Resolution Test ==="
+      - nslookup api.nuget.org || echo "DNS lookup failed"
+      - nslookup gitea.musk.fun || echo "DNS lookup failed for gitea"
+      - echo ""
+      - echo "=== Ping Test (NuGet) ==="
+      - ping -c 3 api.nuget.org || echo "Ping failed"
+      - echo ""
+      - echo "=== HTTPS Connection Test (NuGet) ==="
+      - curl -v --connect-timeout 10 --max-time 30 https://api.nuget.org/v3/index.json 2>&1 | head -50
+      - echo ""
+      - echo "=== HTTPS Connection Test (Gitea) ==="
+      - curl -v --connect-timeout 10 --max-time 30 https://gitea.musk.fun 2>&1 | head -30
+      - echo ""
+      - echo "=== CA Certificates Check ==="
+      - ls -lah /etc/ssl/certs/ | head -20
+    depends_on:
+    - clone
+
+  - name: debug-dotnet-restore
+    image: mcr.microsoft.com/dotnet/sdk:8.0
+    commands:
+      - echo "=== .NET SDK Info ==="
+      - dotnet --info
+      - echo ""
+      - echo "=== CA Certificates Update ==="
+      - apt-get update && apt-get install -y --no-install-recommends ca-certificates
+      - update-ca-certificates
+      - echo ""
+      - echo "=== Test NuGet Connection ==="
+      - dotnet nuget list source
+      - echo ""
+      - echo "=== Test Restore with Simple Project ==="
+      - mkdir -p /tmp/test && cd /tmp/test
+      - dotnet new console
+      - echo "Adding package reference..."
+      - dotnet add package Newtonsoft.Json --version 13.0.3
+      - echo "Testing restore..."
+      - dotnet restore --verbosity detailed 2>&1 | tail -100
+    depends_on:
+    - debug-network
+
   - name: docker nocr telegram listener build & push
     image: plugins/docker
     settings:
@@ -44,7 +95,7 @@ steps:
       password:
         from_secret: hub_password
     depends_on:
-    - clone
+    - debug-dotnet-restore
 
   - name: docker nocr text matcher build & push
     image: plugins/docker

telegram-client

@@ -1 +1 @@
-Subproject commit 22f5dbea91dce52f0316b491c4f1bbb95b5f4e84
+Subproject commit 96d44554404644fd79767e33f85069fe78c37149

telegram-listener

@@ -1 +1 @@
-Subproject commit 08042d5021671ea9c3e2198b0f22fc99e84313fb
+Subproject commit 107739f94b0744d6527df928b59ccd4c5a7d5dbd

text-matcher

@@ -1 +1 @@
-Subproject commit 33c26622b98fc061e3d31aaed8b6fc3c8caaafff
+Subproject commit f6d1b103d19c23e77032bff980b0f153c7aa6daf

users

@@ -1 +1 @@
-Subproject commit c8a05ee49c4fc5fb88eb4a1baa8c543f355be6e3
+Subproject commit 33b35ab50ccdc0c7f6a69b76c1e3562436e43258