The release job feeds packages.arasaka.software itself; YoloCICD is gone

.gitea/scripts/packages.sh signs the rpm with the org secret PACKAGES_SIGNING_KEY,
publishes the deb and rpm into a new snapshot of the repository, signs its metadata and
rewrites SHA256SUMS.txt, on the nuvola runner. Tested against a copy of the live
repository with Debian 13 apt and Fedora 44 dnf.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KizzWs2WQPWN2qgE7G6r8B

.gitea/workflows/release.yml

@@ -46,12 +46,8 @@ jobs:
       - name: The deb and rpm on packages.arasaka.software, the rpm signed
         if: ${{ github.ref_type == 'tag' }}
         env:
-          YOLO_TOKEN: ${{ secrets.YOLO_TOKEN }}
-          YOLO_GITEA: http://localhost:3000
-          YOLO_MIN: "0.1.0"
-        run: |
-          yolo repo submit --project meweb --version "$VERSION" --replace-signed "releases/$VERSION/MeWeb-$VERSION-linux-x64.deb" "releases/$VERSION/MeWeb-$VERSION-linux-x64.rpm"
-          yolo sums "releases/$VERSION"
+          PACKAGES_SIGNING_KEY: ${{ secrets.PACKAGES_SIGNING_KEY }}
+        run: .gitea/scripts/packages.sh "$VERSION"
 
       - name: Publish the release
         if: ${{ github.ref_type == 'tag' || inputs.publish == 'true' }}