feat(OriginalWoW): fill Xarthos (BWL, CoA-custom) loot

Drops verified against db.exil.es: 12511 Xarthos' Bonerender (epic 1H
axe, ilvl 77) and 312512 Xarthos' Skullcrusher (Heroic Raid variant,
ilvl 81). Note: Bonerender is item 12511, not 312511 (that id is an
unrelated Mammoth Fur Cloak).

.gitea/workflows/release.yml

@@ -37,10 +37,14 @@ jobs:
             RID=$(curl -sf -X POST -H "Authorization: token $GITEA_TOKEN" \
               -H "Content-Type: application/json" \
               "$API/repos/$REPO/releases" \
-              -d "$(jq -nc --arg t "$TAG" '{tag_name:$t,name:$t,draft:false,prerelease:false}')" \
+              -d "$(jq -nc --arg t "$TAG" '{tag_name:$t,name:$t,draft:false,prerelease:false,hide_archive_links:true}')" \
               | jq -r '.id')
           fi
           echo "release id: $RID"
+          # Gitea honors hide_archive_links only on edit, not create — PATCH it
+          # so the auto-generated Source Code (zip/tar.gz) links stay hidden.
+          curl -sf -X PATCH -H "Authorization: token $GITEA_TOKEN" -H "Content-Type: application/json" \
+            "$API/repos/$REPO/releases/$RID" -d '{"hide_archive_links":true}' >/dev/null || true
           # Upload every dist/*.zip. Per-asset failures don't fail the job —
           # we want partial releases to still publish rather than block the
           # whole pipeline on one big file.

AtlasLoot_OriginalWoW/originalwow.lua

@@ -1652,6 +1652,12 @@ AtlasLoot_Data["BlackwingLair"] = {
 		[21] = { itemID = 19366 }; --Master Dragonslayer's Orb
 		[23] = { itemID = 21138 }; --Red Scepter Shard
 	};
+	{
+		Name = "Xarthos";
+		NpcID = 12538;
+		[1] = { itemID = 12511 }; --Xarthos' Bonerender
+		[2] = { itemID = 312512 }; --Xarthos' Skullcrusher (Heroic)
+	};
 	{
 		Name = AL["Trash Mobs"];
 		[1] = { itemID = 19436 }; --Cloak of Draconic Might