ci(release): sync release.yml from coa-template

hide_archive_links is only honored by Gitea on release edit, not create —
add the PATCH step after create/lookup so auto-generated source archive
links actually stay hidden (coa-template 90874c5).

.gitea/workflows/release.yml

@@ -37,10 +37,14 @@ jobs:
             RID=$(curl -sf -X POST -H "Authorization: token $GITEA_TOKEN" \
               -H "Content-Type: application/json" \
               "$API/repos/$REPO/releases" \
-              -d "$(jq -nc --arg t "$TAG" '{tag_name:$t,name:$t,draft:false,prerelease:false}')" \
+              -d "$(jq -nc --arg t "$TAG" '{tag_name:$t,name:$t,draft:false,prerelease:false,hide_archive_links:true}')" \
               | jq -r '.id')
           fi
           echo "release id: $RID"
+          # Gitea honors hide_archive_links only on edit, not create — PATCH it
+          # so the auto-generated Source Code (zip/tar.gz) links stay hidden.
+          curl -sf -X PATCH -H "Authorization: token $GITEA_TOKEN" -H "Content-Type: application/json" \
+            "$API/repos/$REPO/releases/$RID" -d '{"hide_archive_links":true}' >/dev/null || true
           # Upload every dist/*.zip. Per-asset failures don't fail the job —
           # we want partial releases to still publish rather than block the
           # whole pipeline on one big file.