fix(ci): 对 Forgejo API 的 curl 加 -k，跳过自签名证书验证

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

scripts/ci/release.sh

@@ -83,7 +83,7 @@ print(json.dumps(body))
 PYEOF
 )
 
-HTTP_CODE=$(curl -w "%{http_code}" -o /tmp/release_resp.json \
+HTTP_CODE=$(curl -k -w "%{http_code}" -o /tmp/release_resp.json \
   -X POST "${FORGEJO_URL}/api/v1/repos/${GITEA_REPOSITORY}/releases" \
   -H "Authorization: token ${FORGEJO_TOKEN}" \
   -H "Content-Type: application/json" \
@@ -104,7 +104,7 @@ echo "==> release: release_id=${RELEASE_ID}"
 upload_asset() {
   local file="$1"
   local code
-  code=$(curl -w "%{http_code}" -o /tmp/upload_resp.json \
+  code=$(curl -k -w "%{http_code}" -o /tmp/upload_resp.json \
     -X POST "${FORGEJO_URL}/api/v1/repos/${GITEA_REPOSITORY}/releases/${RELEASE_ID}/assets" \
     -H "Authorization: token ${FORGEJO_TOKEN}" \
     -F "attachment=@${file}")