chore: refresh docs and adapt workflows for Gitea

.github/workflows/gitea-tracker.yml

@@ -12,12 +12,15 @@ on:
 jobs:
   track:
     name: Track Gitea Release
-    runs-on: ubuntu-latest
+    runs-on: linux-amd64-docker-small
     permissions:
       contents: write
       pull-requests: write
     steps:
       - uses: actions/checkout@v4
+        with:
+          ref: main
+          token: ${{ secrets.GITEA_TOKEN }}
 
       - uses: actions/setup-python@v5
         with:
@@ -31,20 +34,14 @@ jobs:
         run: python -B .github/scripts/track_gitea_release.py
         env:
           GITEA_VERSION: ${{ github.event.inputs.version }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # Optional GitHub token for upstream API rate limits; never use the Gitea job token.
+          GITHUB_TOKEN: ${{ secrets.UPSTREAM_GITHUB_TOKEN }}
 
       - name: Create Pull Request
         if: steps.version.outputs.changed == 'true'
-        uses: peter-evans/create-pull-request@v7
-        with:
-          add-paths: '**/*.md'
-          branch: track/gitea-${{ steps.version.outputs.version }}
-          commit-message: "docs: track Gitea ${{ steps.version.outputs.version }} pending verification"
-          title: "Track Gitea ${{ steps.version.outputs.version }} compatibility"
-          body: |
-            Gitea **${{ steps.version.outputs.version }}** is recorded as [PENDING] across the marked documentation. Verified/tested ranges remain unchanged.
-
-            - [ ] Review upstream mail templates, mailer data, functions, and translation keys.
-            - [ ] Run `cd tools && go test ./...` and `go run . preview all`.
-            - [ ] Record findings in `COMPATIBILITY.md`; update tested ranges and status text only after verification.
-            - [ ] If template changes are needed, release them separately with reviewed notes and assets.
+        run: python -B .github/scripts/gitea_actions.py create-pull-request --version "$UPSTREAM_VERSION"
+        env:
+          UPSTREAM_VERSION: ${{ steps.version.outputs.version }}
+          GITEA_SERVER_URL: ${{ github.server_url }}
+          GITEA_REPOSITORY: ${{ github.repository }}
+          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}