fix(deps,ci): update module path to forgejo.riotpiao.com/rock/homelab-frontend, switch to GITHUB_TOKEN

http.Server.WriteTimeout is an absolute deadline over the whole
response, not an inactivity timeout -- 15s was cutting off SSE streams
from the reasoning model mid-generation, surfacing to clients as a
"terminated" error well before the model finished. Switch to
ReadHeaderTimeout (protects against slow headers without capping body
duration) and raise WriteTimeout to match the edge nginx Ingress's
proxy-read/send-timeout of 3600s.

.gitea/workflows/build.yaml

@@ -67,10 +67,10 @@ jobs:
 
       - name: Registry login
         run: |
-          echo "${FORGEJO_PAT}" | docker login "${REGISTRY}" \
+          echo "${GITHUB_TOKEN}" | docker login "${REGISTRY}" \
             --username rock --password-stdin
         env:
-          FORGEJO_PAT: ${{ secrets.FORGEJO_RIOTPIAO_PAT }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build
         run: |

cmd/gateway/main.go

@@ -9,9 +9,9 @@ import (
 	"os/signal"
 	"syscall"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
-	"github.com/Riotpiaole/homelab-frontend/internal/proxy"
-	"github.com/Riotpiaole/homelab-frontend/internal/server"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/proxy"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/server"
 )
 
 func main() {

cmd/test-workflow/main.go

@@ -8,7 +8,7 @@ import (
 	"time"
 
 	"go.temporal.io/sdk/client"
-	"github.com/Riotpiaole/homelab-frontend/internal/workflow"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/workflow"
 )
 
 func main() {

cmd/worker/main.go

@@ -9,7 +9,7 @@ import (
 
 	"go.temporal.io/sdk/client"
 	"go.temporal.io/sdk/worker"
-	"github.com/Riotpiaole/homelab-frontend/internal/workflow"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/workflow"
 )
 
 func main() {

go.mod

@@ -1,4 +1,4 @@
-module github.com/Riotpiaole/homelab-frontend
+module forgejo.riotpiao.com/rock/homelab-frontend
 
 go 1.25.4
 

internal/config/auth_required_test.go

@@ -3,7 +3,7 @@ package config_test
 import (
 	"testing"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // TestLoadRoutesMissingAuthRequired tests that the auth-required flag is not a silent default:

internal/config/config_test.go

@@ -4,7 +4,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // TestLoadRoutesValidConfig tests that a valid configuration loads correctly.

internal/config/integration_test.go

@@ -5,7 +5,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // TestLoadIntegration tests the full Load function with CONFIG_PATH env var

internal/proxy/bodydispatch_test.go

@@ -11,7 +11,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // TestBodyBasedDispatch verifies that /v1/chat/completions routes based on model field.

internal/proxy/bodysize_test.go

@@ -9,7 +9,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // TestBodySizeCapExact verifies that a body exactly at the cap is accepted.

internal/proxy/embeddings_and_rerank_test.go

@@ -10,7 +10,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // TestEmbeddingsPassthroughNoRewrite verifies /v1/embeddings is not rewritten

internal/proxy/headers_test.go

@@ -8,7 +8,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // TestHeaderHygiene verifies that headers are properly filtered and forwarded.

internal/proxy/models_endpoint_test.go

@@ -10,7 +10,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // ModelListResponse represents the response shape for GET /v1/models

internal/proxy/proxy.go

@@ -13,8 +13,8 @@ import (
 	"strings"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
-	"github.com/Riotpiaole/homelab-frontend/internal/logging"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/logging"
 )
 
 // Handler is a reverse proxy that routes requests to configured upstreams.

internal/proxy/proxy_test.go

@@ -9,7 +9,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 func TestProxyBasic(t *testing.T) {

internal/proxy/router.go

@@ -9,7 +9,7 @@ import (
 	"net/http"
 	"net/url"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // RouteRequest determines which upstream should handle the request.

internal/proxy/streaming_test.go

@@ -10,7 +10,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // TestSSEUnbuffered verifies that SSE events stream to the client without buffering.

internal/proxy/timeout_test.go

@@ -10,7 +10,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // TestConnectTimeout verifies that connections fail at the configured timeout.

internal/proxy/toolcall_test.go

@@ -11,7 +11,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // OpenAI-style tool definition

internal/proxy/unknown_model_test.go

@@ -9,7 +9,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // RFC 9457 Problem Details

internal/server/health_test.go

@@ -8,7 +8,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/server"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/server"
 )
 
 // TestHealthEndpoints verifies health endpoint behavior.

internal/server/server.go

@@ -21,11 +21,17 @@ type Server struct {
 func New(listenAddr string, shutdownTimeout time.Duration, handler http.Handler) *Server {
 	return &Server{
 		httpServer: &http.Server{
-			Addr:         listenAddr,
-			Handler:      handler,
-			ReadTimeout:  15 * time.Second,
-			WriteTimeout: 15 * time.Second,
-			IdleTimeout:  60 * time.Second,
+			Addr:    listenAddr,
+			Handler: handler,
+			// ReadHeaderTimeout (not ReadTimeout) and a long WriteTimeout: both
+			// ReadTimeout and WriteTimeout are absolute deadlines covering the
+			// whole request/response body, not inactivity timeouts -- a 15s
+			// WriteTimeout here was killing in-progress LLM SSE streams (proxy.go's
+			// outbound transport deliberately avoids this same mistake). Mirrors
+			// the edge nginx Ingress's proxy-read/send-timeout of 3600s.
+			ReadHeaderTimeout: 15 * time.Second,
+			WriteTimeout:      1 * time.Hour,
+			IdleTimeout:       60 * time.Second,
 		},
 		shutdownTimeout: shutdownTimeout,
 		healthChecker:   NewHealthChecker(false, false),

internal/server/server_test.go

@@ -10,7 +10,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/server"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/server"
 )
 
 // TestGracefulShutdown verifies that:

internal/testsupport/harness_test.go

@@ -8,7 +8,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/Riotpiaole/homelab-frontend/internal/config"
+	"forgejo.riotpiao.com/rock/homelab-frontend/internal/config"
 )
 
 // startForTest binds the stub on an ephemeral port so the suite does not fight