ci: Only run on "crun" tagged runners for now

The others are not erroring out correctly for close_range syscalls,
causing issues when spawning. So use the "crun" runners and disable
"asan" as there is no overlap.