feat(ci): aggiungi varianti -github dei reusable e fix audit Python

- crea gemelli X-github.yml per ogni reusable con action da github.com (fallback mirror gitea.com)
- python-dependency-check/outdated: audit in venv isolata (fix falsi positivi da runner ML)
- python-dependency-check/outdated: deduplica issue (commento invece di nuova issue)
- examples: aggiungi ci-github.yml e release-github.yml in tutte le cartelle

Fixes #3 @3h

examples/capacitor/release-github.yml

@@ -0,0 +1,49 @@
+# Copia in: .gitea/workflows/release.yml
+# Trigger: git tag v* → APK firmato + AAB Play Store + release Gitea
+#
+# Secrets richiesti nel repository consumer:
+#   KEYSTORE_BASE64        — keystore codificato in base64
+#   KEYSTORE_PASSWORD      — password del keystore
+#   KEY_ALIAS              — alias della chiave
+#   KEY_PASSWORD           — password della chiave
+#   GOOGLE_SERVICES_JSON   — contenuto del file google-services.json (se Firebase)
+#
+# Prerequisito build.gradle (android/app/build.gradle):
+#   signingConfigs {
+#     release {
+#       storeFile file("keystore.jks")
+#       storePassword System.getenv("KEYSTORE_PASSWORD")
+#       keyAlias System.getenv("KEY_ALIAS")
+#       keyPassword System.getenv("KEY_PASSWORD")
+#     }
+#   }
+#
+# NOTA: gitea-release attende entrambe le build Android via needs.
+# Workaround Gitea bug #31900: token esplicito nel checkout di auto-release.yml.
+
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  android-apk:
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/capacitor-android-github.yml@v1
+    secrets: inherit
+    with:
+      build-type: release
+      output-format: apk
+
+  android-aab:
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/capacitor-android-github.yml@v1
+    secrets: inherit
+    with:
+      build-type: release
+      output-format: aab
+
+  gitea-release:
+    needs: [android-apk, android-aab]
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/auto-release-github.yml@v1
+    secrets: inherit