- ci.yml: check out the PR head (or push SHA) instead of always cloning
main; PR checks now test the actual diff. Drop http.sslVerify=false.
Publish to the package registry only on push events.
- preview.yml/release.yml: use GITEATOKEN (GITEA_TOKEN is reserved by
Gitea, so these token steps were silently broken).
- deploy-chrome.yml/release.yml: parse JSON with node instead of
python3 (not installed in the container) and grep; fail loudly
instead of swallowing errors with 2>/dev/null.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
