- Consolidate test + release/build workflows into single .gitea/workflows/ci.yaml
- Add explicit job dependencies (build-push needs test)
- Test runs on all PRs + main pushes
- Build/release runs on main/tags only (after test passes)
- Follows unified Forgejo CI pattern
Note: Using .gitea/ not .forgejo/ (our Forgejo instance uses .gitea/)