fix: replace curl API calls with tea CLI for release pipeline

curl was silently failing inside the container. tea handles auth and
TLS cleanly via logins add, then uses releases edit and assets create.

💘 Generated with Crush

Assisted-by: Claude Sonnet 4.6 via Crush <crush@charm.land>

.woodpecker/release.yaml

@@ -21,28 +21,15 @@ steps:
         from_secret: RELEASER_TOKEN
     commands:
       - |
+        tea logins add --name gitea --url https://git.unkin.net --token "${RELEASER_TOKEN}" --no-version-check
         PREV_TAG=$(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || echo "")
         if [ -n "$PREV_TAG" ]; then
           NOTES=$(git log "${PREV_TAG}..${CI_COMMIT_TAG}" --merges --pretty=format:"- %s")
         else
           NOTES=$(git log --merges --pretty=format:"- %s")
         fi
-        BODY=$(printf '%s' "$NOTES" | sed 's/"/\\"/g; s/$/\\n/' | tr -d '\n')
+        tea releases edit "${CI_COMMIT_TAG}" --note "${NOTES}" --login gitea --repo "${CI_REPO}"
-        GET_RESPONSE=$(curl -s "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/tags/${CI_COMMIT_TAG}")
+        tea releases assets create "${CI_COMMIT_TAG}" node-lookup --login gitea --repo "${CI_REPO}"
-        echo "GET response: ${GET_RESPONSE}"
-        RELEASE_ID=$(printf '%s' "${GET_RESPONSE}" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
-        if [ -z "$RELEASE_ID" ]; then
-          echo "ERROR: failed to find release for tag ${CI_COMMIT_TAG}" >&2
-          exit 1
-        fi
-        echo "Release ID: ${RELEASE_ID}"
-        curl -s -X PATCH "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/${RELEASE_ID}" \
-          -H "Authorization: token ${RELEASER_TOKEN}" \
-          -H "Content-Type: application/json" \
-          -d "{\"body\":\"${BODY}\"}"
-        curl -s -X POST "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/${RELEASE_ID}/assets" \
-          -H "Authorization: token ${RELEASER_TOKEN}" \
-          -F "attachment=@node-lookup"
     backend_options:
       kubernetes:
         serviceAccountName: default