- Use --publish never in pack/CI so tagged builds do not require GH_TOKEN.
- Set build.publish to null and align publish:win with local-only packaging.
- Add Gitea release sync workflow and upload script; fetch script from default
branch so reruns work for tags that predate the script.
Co-authored-by: Cursor <cursoragent@cursor.com>