The default GITHUB_TOKEN is scoped to this repo only and cannot clone the
private upstream HeiniRemote. Reuse the user-wide write PAT (REGISTRY_TOKEN)
that the other repos' actions already rely on, instead of requiring a new
per-repo secret.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Bundles the agent as de.pc_heini.HeiniRemoteAgent on the freedesktop 24.08
runtime, mirroring the o3de-flatpak CI approach (bwrap-free build, OSTree
repo force-pushed to pages, single-file bundle attached to a Gitea release).
Compiles the agent from upstream source (newest v* tag, else main).
Sandbox notes: screen capture/input via portals need no special permission;
the PTY console uses flatpak-spawn --host for a real host shell, and a native
install's agent.toml is adopted read-only.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>