fixup! ci: check for unclean patches

derive kata version as a step

.github/workflows/static.yml

@@ -80,19 +80,20 @@ jobs:
         with:
           githubToken: ${{ secrets.GITHUB_TOKEN }}
           cachixToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
-      - name: Check out Kata
+      - id: kataversion
         working-directory: contrast
         run: |
-          git clone --depth 1 -b "$(nix eval --raw .#kata.kata-runtime.version)" https://github.com/kata-containers/kata-containers.git ../kata
+          echo "v=$(nix eval --raw .#kata.kata-runtime.version)" >> "$GITHUB_OUTPUT"
+      - name: Check out Kata
+        run: |
+          git clone --depth 1 -b "${{ steps.kataversion.outputs.v }}" https://github.com/kata-containers/kata-containers.git kata
       - name: Apply patches
         working-directory: kata
         run: |
           git config --global user.email "[email protected]"
           git config --global user.name "Actions Bot"
           git am --no-3way ../contrast/packages/by-name/kata/kata-runtime/*.patch
-          git format-patch -N --no-signature --zero-commit -o ../contrast/packages/by-name/kata/kata-runtime/ "$(nix eval --raw .#kata.kata-runtime.version)"
-
-          git clone --depth 1 -b "$(nix eval --raw .#kata.kata-runtime.version)" https://github.com/kata-containers/kata-containers.git kata
+          git format-patch -N --no-signature --zero-commit -o ../contrast/packages/by-name/kata/kata-runtime/ "${{ steps.kataversion.outputs.v }}"
       - name: Check for diff
         working-directory: contrast
         run: |