fix: add -k to curl to bypass TLS verification in container

Also ensure RELEASER_TOKEN secret is set in Woodpecker.

💘 Generated with Crush

Assisted-by: Claude Sonnet 4.6 via Crush <crush@charm.land>

.woodpecker/release.yaml

@@ -28,7 +28,7 @@ steps:
           NOTES=$(git log --merges --pretty=format:"- %s")
         fi
         BODY=$(printf '%s' "$NOTES" | sed 's/"/\\"/g; s/$/\\n/' | tr -d '\n')
-        GET_RESPONSE=$(curl -s "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/tags/${CI_COMMIT_TAG}")
+        GET_RESPONSE=$(curl -sk "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/tags/${CI_COMMIT_TAG}")
         echo "GET response: ${GET_RESPONSE}"
         RELEASE_ID=$(printf '%s' "${GET_RESPONSE}" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
         if [ -z "$RELEASE_ID" ]; then
@@ -36,11 +36,11 @@ steps:
           exit 1
         fi
         echo "Release ID: ${RELEASE_ID}"
-        curl -s -X PATCH "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/${RELEASE_ID}" \
+        curl -sk -X PATCH "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/${RELEASE_ID}" \
           -H "Authorization: token ${RELEASER_TOKEN}" \
           -H "Content-Type: application/json" \
           -d "{\"body\":\"${BODY}\"}"
-        curl -s -X POST "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/${RELEASE_ID}/assets" \
+        curl -sk -X POST "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/${RELEASE_ID}/assets" \
           -H "Authorization: token ${RELEASER_TOKEN}" \
           -F "attachment=@node-lookup"
     backend_options: