pin runner/app version, add version label, expicitly include secret, create internal network

compose.yml

@@ -2,10 +2,8 @@
 version: "3.8"
 
 services:
-  runner:
-    image: registry.gitlab.com/gitlab-org/gitlab-runner:alpine
-    depends_on:
-      - dind
+  app:
+    image: registry.gitlab.com/gitlab-org/gitlab-runner:v18.6.1
     environment:
       - CI_SERVER_URL=${DOMAIN}
       - DOCKER_HOST=tcp://socket-proxy:2375
@@ -20,7 +18,11 @@ services:
       - "runnner_config:/etc/gitlab-runner"
     networks:
       - internal
+    secrets:
+      - registration_token
     deploy:
+      labels:
+        - "coop-cloud.${STACK_NAME}.version=0.1.0+18.6.1"
       restart_policy:
         condition: on-failure
 
@@ -65,6 +67,9 @@ services:
 volumes:
   runnner_config:
 
+networks:
+  internal:
+
 secrets:
   registration_token:
     name: ${STACK_NAME}_registration_token_${SECRET_REGISTRATION_TOKEN_VERSION}