feat(ci): aggiungi varianti -github dei reusable e fix audit Python

- crea gemelli X-github.yml per ogni reusable con action da github.com (fallback mirror gitea.com)
- python-dependency-check/outdated: audit in venv isolata (fix falsi positivi da runner ML)
- python-dependency-check/outdated: deduplica issue (commento invece di nuova issue)
- examples: aggiungi ci-github.yml e release-github.yml in tutte le cartelle

Fixes #3 @3h

.gitea/workflows/python-docker-release-github.yml

@@ -0,0 +1,121 @@
+name: Python Docker Release
+
+on:
+  workflow_call:
+    inputs:
+      python-version:
+        type: string
+        default: '3.11'
+      install-extras:
+        description: 'Extras pip da installare (es: dev, test)'
+        type: string
+        default: 'dev'
+      runner:
+        type: string
+        default: 'catthehacker-latest'
+      working-directory:
+        description: 'Directory di lavoro se il progetto non è in root'
+        type: string
+        default: '.'
+      dockerfile:
+        description: 'Path al Dockerfile'
+        type: string
+        default: './Dockerfile'
+
+jobs:
+  python-docker-release:
+    runs-on: ${{ inputs.runner }}
+    defaults:
+      run:
+        working-directory: ${{ inputs.working-directory }}
+    steps:
+      - name: Checkout
+        uses: https://github.com/actions/checkout@v6
+
+      - name: Setup Python
+        uses: https://github.com/actions/setup-python@v5.2.0
+        with:
+          python-version: ${{ inputs.python-version || '3.11' }}
+
+      - name: Cache pip
+        uses: https://github.com/actions/cache@v4
+        with:
+          path: ~/.cache/pip
+          key: ${{ runner.os }}-pip-${{ inputs.python-version }}-${{ hashFiles('**/pyproject.toml', '**/requirements*.txt') }}
+          restore-keys: |
+            ${{ runner.os }}-pip-${{ inputs.python-version }}-
+            ${{ runner.os }}-pip-
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          if [ -n "${{ inputs.install-extras }}" ]; then
+            pip install -e ".[${{ inputs.install-extras }}]"
+          elif [ -f requirements-dev.txt ]; then
+            pip install -r requirements-dev.txt
+          elif [ -f requirements.txt ]; then
+            pip install -r requirements.txt
+          else
+            pip install -e "."
+          fi
+
+      - name: Lint (ruff)
+        run: ruff check .
+
+      - name: Format check (ruff)
+        run: ruff format --check .
+
+      - name: Type check (mypy)
+        run: mypy .
+
+      - name: Test (pytest)
+        run: pytest --tb=short -q
+
+      - name: Login to container registry
+        uses: https://github.com/docker/login-action@v4
+        with:
+          registry: gitea.pzetatouch.it
+          username: ${{ secrets.G_USER }}
+          password: ${{ secrets.NPM_TOKEN }}
+
+      - name: Determine image tags
+        id: tags
+        run: |
+          APP_NAME=$(python -c "
+          import tomllib, pathlib
+          data = tomllib.loads(pathlib.Path('pyproject.toml').read_text())
+          print(data['project']['name'])
+          " 2>/dev/null || python3 -c "
+          import re, pathlib
+          content = pathlib.Path('pyproject.toml').read_text()
+          m = re.search(r'^name\s*=\s*[\"\'](.*?)[\"\']', content, re.MULTILINE)
+          print(m.group(1) if m else 'unknown')
+          ")
+          VERSION=$(python -c "
+          import tomllib, pathlib
+          data = tomllib.loads(pathlib.Path('pyproject.toml').read_text())
+          print(data['project']['version'])
+          " 2>/dev/null || python3 -c "
+          import re, pathlib
+          content = pathlib.Path('pyproject.toml').read_text()
+          m = re.search(r'^version\s*=\s*[\"\'](.*?)[\"\']', content, re.MULTILINE)
+          print(m.group(1) if m else '0.0.0')
+          ")
+          REGISTRY="gitea.pzetatouch.it/pzeta_touch"
+          echo "version_tag=${REGISTRY}/${APP_NAME}:${VERSION}" >> $GITHUB_OUTPUT
+          echo "latest_tag=${REGISTRY}/${APP_NAME}:latest" >> $GITHUB_OUTPUT
+          echo "version=${VERSION}" >> $GITHUB_OUTPUT
+
+      - name: Build and push Docker image
+        uses: https://github.com/docker/build-push-action@v6
+        with:
+          push: true
+          context: ${{ inputs.working-directory }}
+          file: ${{ inputs.dockerfile }}
+          tags: |
+            ${{ steps.tags.outputs.version_tag }}
+            ${{ steps.tags.outputs.latest_tag }}
+          labels: |
+            org.opencontainers.image.source=${{ gitea.server_url }}/${{ gitea.repository }}
+            org.opencontainers.image.revision=${{ gitea.sha }}
+            org.opencontainers.image.version=${{ steps.tags.outputs.version }}