chore(ci): aggiorna action versions, fix auto-release e migrazione self-hosted

- Aggiorna checkout v4→v6, setup-python v5→v5.2.0, setup-android v3→v4
- Aggiorna upload-artifact v3→v4, docker/login-action v3→v4
- Aggiunge needs su auto-release in tutti gli esempi (fix esecuzione parallela)
- Aggiunge token esplicito nel checkout come workaround bug Gitea #31900
- Aggiunge job dependency-outdated mancante in libreria-npm/maintenance.yml
- Aggiorna schedule: libreria-npm mercoledì 02:00, microservizio lunedì 02:00
- Migra tutti i riferimenti da gitea.com/Punga78 a gitea.pzetatouch.it/devops

Fixes #1 @3h

examples/libreria-npm/ci.yml

@@ -16,5 +16,5 @@ on:
 
 jobs:
   quality-gates:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/quality-gates.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/quality-gates.yml@v1
     secrets: inherit

examples/libreria-npm/maintenance.yml

@@ -1,5 +1,9 @@
 # Copia in: .gitea/workflows/maintenance.yml
-# Combina branch-cleanup (PR merge) e dependency-check (settimanale)
+# Trigger:
+#   - PR merged           → cleanup branch sorgente
+#   - Ogni lunedì 08:00   → security audit vulnerabilità (settimanale)
+#   - Ogni 1° del mese    → controllo pacchetti obsoleti (mensile)
+#   - Manuale             → workflow_dispatch (esegue tutti i job di manutenzione)
 
 name: Maintenance
 
@@ -7,16 +11,26 @@ on:
   pull_request:
     types: [closed]
   schedule:
-    - cron: '0 8 * * 1'
+    - cron: '0 2 * * 3'    # ogni mercoledì alle 02:00 → security audit
+    - cron: '0 2 1 * *'    # ogni 1° del mese alle 02:00 → outdated check
   workflow_dispatch:
 
 jobs:
   branch-cleanup:
     if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
     secrets: inherit
 
-  dependency-check:
-    if: gitea.event_name == 'schedule' || gitea.event_name == 'workflow_dispatch'
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-check.yml@v1
+  dependency-audit:
+    if: >
+      gitea.event_name == 'workflow_dispatch' ||
+      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 2 * * 3')
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-check.yml@v1
+    secrets: inherit
+
+  dependency-outdated:
+    if: >
+      gitea.event_name == 'workflow_dispatch' ||
+      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 2 1 * *')
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
     secrets: inherit

examples/libreria-npm/release.yml

@@ -1,8 +1,8 @@
 # Copia in: .gitea/workflows/release.yml
 # Trigger: git tag v* → pubblica su npm + crea release Gitea
 #
-# NOTA: i job girano in parallelo (non sequenziali con needs).
-# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
+# NOTA: auto-release attende npm-publish via needs.
+# Workaround Gitea bug #31900: token esplicito nel checkout di auto-release.yml.
 
 name: Release
 
@@ -13,9 +13,10 @@ on:
 
 jobs:
   npm-publish:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/npm-publish.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/npm-publish.yml@v1
     secrets: inherit
 
   auto-release:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/auto-release.yml@v1
+    needs: [npm-publish]
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/auto-release.yml@v1
     secrets: inherit