A daily job keeps the tools behind the deb and rpm repositories current

The box updates the tools that build packages.arasaka.software every morning, and
packages.yml rebuilds and re-signs the apt and rpm repositories when those tools change,
so a broken update shows up the same morning, not at the next release.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01T9uhaCTSycTh1r8At679Pz

.gitea/workflows/packages.yml

@@ -0,0 +1,24 @@
+name: Package tools
+
+on:
+  schedule:
+    - cron: '43 5 * * *'
+  workflow_dispatch:
+
+jobs:
+  refresh:
+    name: The box's updated package tools, tried on the apt and rpm repositories
+    runs-on: nuvola
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Check that the box brought the tools up to date this morning
+        run: |
+          systemctl show packages-tools -p Result -p ExecMainExitTimestamp
+          systemctl is-active --quiet packages-tools.timer
+          test "$(systemctl show packages-tools -p Result --value)" = success
+
+      - name: Rebuild the apt and rpm repositories on packages.arasaka.software when the tools changed
+        env:
+          PACKAGES_SIGNING_KEY: ${{ secrets.PACKAGES_SIGNING_KEY }}
+        run: .gitea/scripts/packages.sh