ci: pin registry login username to gitea-admin

REGISTRY_TOKEN was created under the gitea-admin user, so the
docker/helm registry username must match. Using github.actor
would fail for any other workflow-triggering user.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.gitea/workflows/ci.yml

@@ -59,7 +59,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Build and push worker image
@@ -91,7 +91,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Build and push API image

.gitea/workflows/helm-release.yml

@@ -32,7 +32,7 @@ jobs:
       - name: Log in to Gitea OCI registry
         run: |
           echo "${{ secrets.REGISTRY_TOKEN }}" | helm registry login git.farh.net \
-            --username "${{ github.actor }}" \
+            --username gitea-admin \
             --password-stdin
 
       - name: Push chart to Gitea OCI registry

.gitea/workflows/release-beta.yml

@@ -62,7 +62,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Build and push worker image
@@ -93,7 +93,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Build and push API image
@@ -125,7 +125,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Inspect worker image

.gitea/workflows/release.yml

@@ -77,7 +77,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Build and push worker image
@@ -111,7 +111,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Build and push API image
@@ -145,7 +145,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Inspect worker image

.gitea/workflows/rollback.yml

@@ -78,7 +78,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Verify Docker image tag exists