ci: Migrate release to job GITEA_TOKEN

Release Tag still points GITEA_TOKEN at secrets.RELEASE_TOKEN, a
legacy PAT. Prefer the job built-in token with contents: write,
mirroring GITHUB_TOKEN and forcing GoReleaser onto the gitea path
so tag pushes publish without that PAT.

Link: #26

.gitea/workflows/release-tag.yaml

@@ -7,6 +7,8 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@main
         with:
@@ -21,4 +23,6 @@ jobs:
           version: 'latest'
           args: release
         env:
-          GITEA_TOKEN: ${{secrets.RELEASE_TOKEN}}     
+          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITEA_TOKEN }}
+          GORELEASER_FORCE_TOKEN: gitea