chore(ci): use HTTP manual clone with Gitea internal Docker network IP, ditch ssh

.gitea/workflows/ci.yml

@@ -22,25 +22,14 @@ jobs:
       - name: Install tools
         run: apt-get update -qq && apt-get install -y -qq curl unzip
 
-      - name: Add Gitea SSH Host Key
-        run: |
-          mkdir -p ~/.ssh
-          ssh-keyscan -p 22 172.18.0.2 >> ~/.ssh/known_hosts || true
-          # Direct IP routing avoids dns completely. The API returns SSH_PORT=222 but internally Gitea listens on 22.
-          # So we MUST map any connection to the internal port 22.
-          printf "Host gitea\n  HostName 172.18.0.2\n  Port 22\n  StrictHostKeyChecking no\n" > ~/.ssh/config
-          printf "Host thunderobot\n  HostName 172.18.0.2\n  Port 22\n  StrictHostKeyChecking no\n" >> ~/.ssh/config
-          
-          # Force checkout to use the mapped config
-          git config --global url."ssh://git@gitea/".insteadOf "ssh://git@gitea:222/"
-          git config --global url."ssh://git@gitea/".insteadOf "git@gitea:222:"
-          chmod 600 ~/.ssh/config
-
       - name: Checkout Code
-        uses: actions/checkout@v4
-        with:
-          repository: danchie/tekton
-          ssh-key: ${{ secrets.TEKTON_SSH_KEY }}
+        run: |
+          # Use manual HTTP clone to bypass the complex SSH/Tailscale/Port222 networking completely.
+          # We use the internal gitea docker network IP and port 3000 directly.
+          git config --global credential.helper store
+          echo "http://adtpdn:${{ secrets.TEKTON_RELEASE_TOKEN }}@172.18.0.2:3000" > ~/.git-credentials
+          git clone http://172.18.0.2:3000/danchie/tekton.git .
+          git checkout $TAG_NAME
 
       - name: Setup Godot (Cached)
         run: |