release: fall back to PAT secret for package publish

Built-in job token (secrets.GITHUB_TOKEN) returns 401 against the
Package Registry API on this Gitea instance even with
permissions: packages: write, so use a manual PACKAGE_TOKEN secret
instead.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

.gitea/workflows/release.yml

@@ -7,8 +7,6 @@ on:
 jobs:
   build-and-publish:
     runs-on: ubuntu-latest
-    permissions:
-      packages: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
@@ -23,7 +21,7 @@ jobs:
       - name: Publish to package registry
         env:
           VERSION: ${{ gitea.ref_name }}
-          TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TOKEN: ${{ secrets.PACKAGE_TOKEN }}
           BASE: ${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/hotpcalc
         run: |
           set -e