ci(checks): 触发路径纳入 scripts/ci(否则 CI 脚本改动不触发 lint)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.gitea/workflows/ci.yml

@@ -10,6 +10,7 @@ on:
       - 'client/**'
       - 'server/**'
       - 'ci/**'
+      - 'scripts/ci/**'
       - '.gitea/workflows/ci.yml'
   pull_request:
     branches: [main]
@@ -38,6 +39,16 @@ jobs:
               /mnt/deploy/bootstrap/monitor/deadman-watch.sh \
               /mnt/deploy/single-node/deploy.sh
 
+      - name: shellcheck CI 脚本(scripts/ci)
+        run: |
+          docker run --rm \
+            -v "$PWD/scripts/ci:/mnt/scripts/ci:ro" \
+            koalaman/shellcheck:stable \
+            -S warning \
+              /mnt/scripts/ci/_env.sh \
+              /mnt/scripts/ci/lib-forgejo.sh \
+              /mnt/scripts/ci/notify.sh
+
   # ── Job 2: OpenAPI Sync Check ────────────────────────────────────────────
   openapi-check:
     name: OpenAPI Sync Check