feat(ci): aggiungi varianti -github dei reusable e fix audit Python

- crea gemelli X-github.yml per ogni reusable con action da github.com (fallback mirror gitea.com)
- python-dependency-check/outdated: audit in venv isolata (fix falsi positivi da runner ML)
- python-dependency-check/outdated: deduplica issue (commento invece di nuova issue)
- examples: aggiungi ci-github.yml e release-github.yml in tutte le cartelle

Fixes #3 @3h

examples/python/ci-github.yml

@@ -0,0 +1,31 @@
+# Copia in: .gitea/workflows/ci.yml
+# Usato da: microservizi Python con FastAPI / pyproject.toml
+#
+# Requisiti pyproject.toml:
+#   [project.optional-dependencies]
+#   dev = ["ruff", "mypy", "pytest", ...]
+#
+# Input opzionali:
+#   python-version: '3.11'   # default già impostato
+#   install-extras: 'dev'    # default già impostato
+
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  quality-gates:
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-quality-gates-github.yml@v1
+    secrets: inherit
+    # with:
+    #   python-version: '3.11'   # opzionale, default già impostato
+    #   install-extras: 'dev'    # opzionale, default già impostato

examples/python/release-github.yml

@@ -0,0 +1,32 @@
+# Copia in: .gitea/workflows/release.yml
+# Trigger: git tag v* → build Docker + crea release Gitea
+#
+# NOTA: auto-release attende docker-release via needs.
+# Workaround Gitea bug #31900: token esplicito nel checkout di python-auto-release.yml.
+#
+# Prerequisiti:
+#   - Dockerfile presente nella root del progetto
+#   - pyproject.toml con [project] name e version
+#   - Secrets: G_USER (docker login), NPM_TOKEN (usato come password registry)
+
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  docker-release:
+    runs-on: catthehacker-latest  # workaround Gitea bug #34986: runs-on non rispettato in workflow_call
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-docker-release-github.yml@v1
+    secrets: inherit
+    with:
+      runner: catthehacker-latest  # runner con Docker pre-installato
+      # python-version: '3.11'    # opzionale
+      # install-extras: 'dev'     # opzionale
+
+  auto-release:
+    needs: [docker-release]
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-auto-release-github.yml@v1
+    secrets: inherit