fix(ci): Forgejo Actions auth + kustomize cleanup in validate-k8s workflow

.forgejo/workflows/argocd-sync.yaml

@@ -12,7 +12,13 @@ jobs:
     runs-on: docker
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        run: |
+          REPO_URL="${{ gitea.server_url }}/${{ gitea.repository }}.git"
+          CLONE_URL="https://${{ secrets.CI_RUNNER }}:${{ secrets.CI_RUNNER_SECRET }}@${REPO_URL#https://}"
+          git clone --depth 1 "$CLONE_URL" .
+          cd ${GITHUB_WORKSPACE}
+          git fetch origin main
+          git checkout main
 
       - name: Install ArgoCD CLI
         run: |

.forgejo/workflows/security-scan.yaml

@@ -16,7 +16,13 @@ jobs:
     runs-on: docker
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        run: |
+          REPO_URL="${{ gitea.server_url }}/${{ gitea.repository }}.git"
+          CLONE_URL="https://${{ secrets.CI_RUNNER }}:${{ secrets.CI_RUNNER_SECRET }}@${REPO_URL#https://}"
+          git clone --depth 1 "$CLONE_URL" .
+          cd ${GITHUB_WORKSPACE}
+          git fetch origin main
+          git checkout main
 
       - name: Install Tools
         run: |

.forgejo/workflows/validate-k8s.yaml

@@ -18,7 +18,13 @@ jobs:
     runs-on: docker
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        run: |
+          REPO_URL="${{ gitea.server_url }}/${{ gitea.repository }}.git"
+          CLONE_URL="https://${{ secrets.CI_RUNNER }}:${{ secrets.CI_RUNNER_SECRET }}@${REPO_URL#https://}"
+          git clone --depth 1 "$CLONE_URL" .
+          cd ${GITHUB_WORKSPACE}
+          git fetch origin main
+          git checkout main
 
       - name: Install Tools
         run: |
@@ -30,11 +36,12 @@ jobs:
 
           # Install kubeval
           curl -L https://github.com/instrumenta/kubeval/releases/latest/download/kubeval-linux-amd64.tar.gz | tar xz
-          mv kubeval /usr/local/bin/
+          mv -f kubeval /usr/local/bin/
 
-          # Install kustomize
+          # Install kustomize (remove old if exists)
+          rm -f kustomize
           curl -s https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh | bash
-          mv kustomize /usr/local/bin/
+          mv -f kustomize /usr/local/bin/
 
           # Install ArgoCD CLI
           curl -sSL -o /usr/local/bin/argocd https://github.com/argoproj/argo-cd/releases/latest/download/argocd-linux-amd64