fix: use TOKEN from env with fallback to secret

.gitea/workflows/deploy.yaml

@@ -36,19 +36,21 @@ jobs:
 
           PAYLOAD="$(printf '%s' "$BODY" | jq -Rs '{tag_name: $v, name: $v, body: ., draft: false, prerelease: false}' --arg v "${VERSION}")"
 
+          TOKEN="${GITEA_TOKEN:-${{ secrets.GITEA_TOKEN }}}"
+
           HTTP_CODE="$(curl -s -w '%{http_code}' -o /tmp/release-resp.json \
             -X POST "${GITEA_API}/repos/${GITEA_REPO}/releases" \
-            -H "Authorization: token ${{ secrets.GITEA_TOKEN }}" \
+            -H "Authorization: token ${TOKEN}" \
             -H "Content-Type: application/json" \
             -d "$PAYLOAD")"
 
           if [ "${HTTP_CODE}" = "409" ]; then
             RELEASES="$(curl -sf "${GITEA_API}/repos/${GITEA_REPO}/releases" \
-              -H "Authorization: token ${{ secrets.GITEA_TOKEN }}")"
+              -H "Authorization: token ${TOKEN}")"
             REL_ID="$(echo "$RELEASES" | jq -r ".[] | select(.tag_name==\"${VERSION}\") | .id")"
             HTTP_CODE="$(curl -s -w '%{http_code}' -o /tmp/release-resp.json \
               -X PATCH "${GITEA_API}/repos/${GITEA_REPO}/releases/${REL_ID}" \
-              -H "Authorization: token ${{ secrets.GITEA_TOKEN }}" \
+              -H "Authorization: token ${TOKEN}" \
               -H "Content-Type: application/json" \
               -d "$PAYLOAD")"
           fi