🐛 fix(ci): correggi URL istanza, token e struttura YAML nei workflow condivisi

- Sostituito URL hardcoded con ${{ gitea.server_url }} (portabilità)
- Sostituito ${{ secrets.GITEA_TOKEN }} con ${{ gitea.token }} (token automatico)
- Aggiunto env SERVER_URL/REPOSITORY per evitare espressioni inline nei curl
- Fix dependency-check: rimosso BODY multi-riga (bug YAML run:|) → printf + /tmp/body.md
- Fix auto-release: changelog su /tmp/changelog.txt (evita collisione workspace)
- Fix branch-cleanup: encoding branch via variabile (sicurezza shell)

.gitea/workflows/auto-release.yml

@@ -24,21 +24,23 @@ jobs:
             CHANGELOG=$(git log --pretty=format:"- %s (%h)" "${PREV_TAG}..${CURRENT_TAG}")
           fi
 
-          echo "$CHANGELOG" > changelog.txt
+          echo "$CHANGELOG" > /tmp/changelog.txt
           echo "current_tag=$CURRENT_TAG" >> $GITHUB_OUTPUT
 
       - name: Create release
         env:
-          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+          GITEA_TOKEN: ${{ gitea.token }}
+          SERVER_URL: ${{ gitea.server_url }}
+          REPOSITORY: ${{ gitea.repository }}
         run: |
           CURRENT_TAG=${{ steps.changelog.outputs.current_tag }}
           APP_NAME=$(jq -r '.name' package.json)
-          CHANGELOG=$(cat changelog.txt)
+          CHANGELOG=$(cat /tmp/changelog.txt)
 
           curl -s -X POST \
             -H "Content-Type: application/json" \
             -H "Authorization: token $GITEA_TOKEN" \
-            "https://gitea.pzetatouch.it/api/v1/repos/${{ gitea.repository }}/releases" \
+            "$SERVER_URL/api/v1/repos/$REPOSITORY/releases" \
             -d "{
               \"tag_name\": \"$CURRENT_TAG\",
               \"name\": \"$APP_NAME $CURRENT_TAG\",