fix(ci): use configured release token secret

.gitea/workflows/package.yml

@@ -90,11 +90,11 @@ jobs:
         shell: bash
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
-          GITEA_RELEASE_TOKEN: ${{ secrets.GITEA_RELEASE_TOKEN }}
+          RELEASE_TOKEN: ${{ secrets.RELEASE_TOKEN }}
         run: |
           set -euo pipefail
           : "${NODE_AUTH_TOKEN:?NPM_PUBLISH_TOKEN is required}"
-          : "${GITEA_RELEASE_TOKEN:?GITEA_RELEASE_TOKEN is required}"
+          : "${RELEASE_TOKEN:?RELEASE_TOKEN is required}"
 
       - name: Type check
         run: pnpm typecheck
@@ -171,11 +171,11 @@ jobs:
       - name: Create Gitea release
         shell: bash
         env:
-          GITEA_RELEASE_TOKEN: ${{ secrets.GITEA_RELEASE_TOKEN }}
+          RELEASE_TOKEN: ${{ secrets.RELEASE_TOKEN }}
         run: |
           set -euo pipefail
           source release.env
-          : "${GITEA_RELEASE_TOKEN:?GITEA_RELEASE_TOKEN is required}"
+          : "${RELEASE_TOKEN:?RELEASE_TOKEN is required}"
           server_url="${{ gitea.server_url }}"
           api_url="$server_url/api/v1/repos/${{ gitea.repository }}/releases"
           target_commitish="$(git rev-parse HEAD)"
@@ -194,7 +194,7 @@ jobs:
 
           release_response="$(curl --fail --show-error --silent \
             --request POST \
-            --header "Authorization: token $GITEA_RELEASE_TOKEN" \
+            --header "Authorization: token $RELEASE_TOKEN" \
             --header 'Content-Type: application/json' \
             --data @release.json \
             "$api_url")"
@@ -204,7 +204,7 @@ jobs:
             asset_name="$(basename "$asset")"
             curl --fail --show-error --silent \
               --request POST \
-              --header "Authorization: token $GITEA_RELEASE_TOKEN" \
+              --header "Authorization: token $RELEASE_TOKEN" \
               --header 'Content-Type: application/octet-stream' \
               --data-binary "@$asset" \
               "$api_url/$release_id/assets?name=$asset_name" > /dev/null

README.md

@@ -54,8 +54,9 @@ git push origin main --follow-tags
 `version` 完全一致。稳定版发布为 npm `latest` 并更新服务器下载目录的 latest 链接；预发布版发布为
 npm `next`，不会覆盖稳定版 latest。流水线会创建 Gitea Release，并上传 `.tgz` 与 SHA-256 校验文件。
 
-仓库 Actions 需要配置 `NPM_PUBLISH_TOKEN`（npm 包发布权限）和 `GITEA_RELEASE_TOKEN`（仓库 Release
+仓库 Actions 需要配置 `NPM_PUBLISH_TOKEN`（npm 包发布权限）和 `RELEASE_TOKEN`（仓库 Release
 写入权限）两个 Secret。
+
 ### 数据结构
 
 单通道可以使用采样值（`sampleRate` 为每秒采样数）或显式坐标点：