fix(gitea-runner): fetch source via /api/v1 archive endpoint

gitea.com now redirects unauthenticated /gitea/runner/archive/v*.tar.gz to /user/login. The /api/v1/repos/gitea/runner/archive/v*.tar.gz endpoint still serves anonymously and returns byte-identical contents, so the Manifest is unchanged.

scripts/bump-version.sh

@@ -10,8 +10,8 @@ set -euo pipefail
 
 PN="gitea-runner"
 UPSTREAM_RSS="https://gitea.com/gitea/runner/releases.rss"
-UPSTREAM_ARCHIVE="https://gitea.com/api/v1/repos/gitea/runner/archive"
+UPSTREAM_ARCHIVE="https://gitea.com/gitea/runner/archive"
-UPSTREAM_GOMOD="https://gitea.com/api/v1/repos/gitea/runner/raw/go.mod"
+UPSTREAM_GOMOD="https://gitea.com/gitea/runner/raw/tag"
 
 : "${BUMP_TOKEN:?BUMP_TOKEN is required}"
 : "${GITHUB_SERVER_URL:?GITHUB_SERVER_URL is required}"
@@ -82,7 +82,7 @@ git checkout -b "$branch"
 git mv "${pkgdir}/${PN}-${current}.ebuild" "${pkgdir}/${PN}-${latest}.ebuild"
 
 # Track the upstream go.mod's required Go version in BDEPEND.
-goreq=$(curl -fsSL "${UPSTREAM_GOMOD}?ref=v${latest}" \
+goreq=$(curl -fsSL "${UPSTREAM_GOMOD}/v${latest}/go.mod" \
   | grep -oE '^go [0-9]+\.[0-9]+(\.[0-9]+)?' | awk '{print $2}')
 [ -n "$goreq" ] && sed -i -E \
   "s#^BDEPEND=\">=dev-lang/go-[0-9.]+\"#BDEPEND=\">=dev-lang/go-${goreq}\"#" \