JakeBreath 7cecfeabc6 Use a minimal registry PAT and the job token for releases ...

Gitea's container registry rejects the automatic job token
(go-gitea/gitea#23642 is still open), so the image push keeps a PAT with
only the write:package scope; a preflight step fails clearly when the
REGISTRY_USER/REGISTRY_TOKEN secrets are missing. Release creation needs
no PAT: the desktop job asks for contents: write on the job token.

2026-09-22 23:35:55 -05:00

..

cd.yml

Use a minimal registry PAT and the job token for releases

2026-09-22 23:35:55 -05:00

ci.yml

Make Actions token permissions explicit

2026-09-22 23:30:37 -05:00