chore(ci): use HTTP manual clone with Gitea internal Docker network IP, ditch ssh

.gitea/workflows/ci.yml

@@ -22,27 +22,14 @@ jobs:
       - name: Install tools
         run: apt-get update -qq && apt-get install -y -qq curl unzip
 
-      - name: Add Gitea SSH Host Key
-        run: |
-          mkdir -p ~/.ssh
-          ssh-keyscan -p 22 172.18.0.2 >> ~/.ssh/known_hosts || true
-          # Route all possible hostnames Gitea might hand out via API back to the internal docker port 22
-          printf "Host gitea\n  HostName 172.18.0.2\n  Port 22\n  StrictHostKeyChecking no\n" > ~/.ssh/config
-          printf "Host thunderobot\n  HostName 172.18.0.2\n  Port 22\n  StrictHostKeyChecking no\n" >> ~/.ssh/config
-          printf "Host thunderobot.tail5d6e8e.ts.net\n  HostName 172.18.0.2\n  Port 22\n  StrictHostKeyChecking no\n" >> ~/.ssh/config
-          
-          # Force checkout to rewrite port 222 down to 22
-          git config --global url."ssh://git@gitea/".insteadOf "ssh://git@gitea:222/"
-          git config --global url."ssh://git@gitea/".insteadOf "git@gitea:222:"
-          git config --global url."ssh://git@thunderobot.tail5d6e8e.ts.net/".insteadOf "ssh://git@thunderobot.tail5d6e8e.ts.net:222/"
-          git config --global url."ssh://git@thunderobot.tail5d6e8e.ts.net/".insteadOf "git@thunderobot.tail5d6e8e.ts.net:222:"
-          chmod 600 ~/.ssh/config
-
       - name: Checkout Code
-        uses: actions/checkout@v4
-        with:
-          repository: danchie/tekton
-          ssh-key: ${{ secrets.TEKTON_SSH_KEY }}
+        run: |
+          # Use manual HTTP clone to bypass the complex SSH/Tailscale/Port222 networking completely.
+          # We use the internal gitea docker network IP and port 3000 directly.
+          git config --global credential.helper store
+          echo "http://adtpdn:${{ secrets.TEKTON_RELEASE_TOKEN }}@172.18.0.2:3000" > ~/.git-credentials
+          git clone http://172.18.0.2:3000/danchie/tekton.git .
+          git checkout $TAG_NAME
 
       - name: Setup Godot (Cached)
         run: |