Gitea Actions reads workflows from master; this empty commit skips CI
so PR #7 can land the fixed ci.yml on the default branch.
Co-authored-by: Cursor <cursoragent@cursor.com>
Use node:20-bullseye images with checkout-first steps to avoid broken
Ubuntu jammy apt/GPG installs, replace Trivy dependency scanning with
npm audit and pip-audit, and install tooling via pip or prebuilt binaries.
Co-authored-by: Cursor <cursoragent@cursor.com>