ci(checks): shellcheck 覆盖 scripts/ci

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.gitea/workflows/ci.yml

@@ -38,6 +38,16 @@ jobs:
               /mnt/deploy/bootstrap/monitor/deadman-watch.sh \
               /mnt/deploy/single-node/deploy.sh
 
+      - name: shellcheck CI 脚本(scripts/ci)
+        run: |
+          docker run --rm \
+            -v "$PWD/scripts/ci:/mnt/scripts/ci:ro" \
+            koalaman/shellcheck:stable \
+            -S warning \
+              /mnt/scripts/ci/_env.sh \
+              /mnt/scripts/ci/lib-forgejo.sh \
+              /mnt/scripts/ci/notify.sh
+
   # ── Job 2: OpenAPI Sync Check ────────────────────────────────────────────
   openapi-check:
     name: OpenAPI Sync Check