fix: Gitea Actions use haskelseed runner and PACKAGE_* secrets

ubuntu-latest never matched the self-hosted runner; Gitea also rejects
GITEA_-prefixed secret names. Wire publish workflow to PACKAGE_USER/TOKEN.

.gitea/workflows/ci.yml

@@ -8,7 +8,7 @@ on:
 
 jobs:
   test:
-    runs-on: ubuntu-latest
+    runs-on: haskelseed
     strategy:
       matrix:
         python-version: ["3.10", "3.12"]

.gitea/workflows/publish-python-package.yml

@@ -8,7 +8,7 @@ on:
 
 jobs:
   publish:
-    runs-on: ubuntu-latest
+    runs-on: haskelseed
     steps:
       - name: Check out source
         uses: actions/checkout@v4
@@ -29,8 +29,8 @@ jobs:
 
       - name: Upload to Gitea PyPI
         env:
-          TWINE_USERNAME: ${{ secrets.GITEA_PACKAGE_USER }}
-          TWINE_PASSWORD: ${{ secrets.GITEA_PACKAGE_TOKEN }}
+          TWINE_USERNAME: ${{ secrets.PACKAGE_USER }}
+          TWINE_PASSWORD: ${{ secrets.PACKAGE_TOKEN }}
         run: >-
           python -m twine upload
           --repository-url https://gitea.coulomb.social/api/packages/coulomb/pypi