fix(pack): valid manifest YAML, stable-release picker, tolerant asset re-upload

- manifest: single-quote the coa-template note - nested double quotes
  made the scalar invalid YAML (awk include-parser unaffected; it only
  reads repo:/include: lines)
- build_pack: releases?limit=1 could hand back a prerelease/draft;
  fetch limit=10 and jq-select the first stable release
- release.yml: re-running for an existing tag 409'd on duplicate asset
  names and set -euo pipefail killed the job; skip already-attached
  assets / warn on failed uploads and only fail when the release ends
  up with zero assets

.gitea/workflows/release.yml

@@ -41,12 +41,31 @@ jobs:
           # so the auto-generated Source Code (zip/tar.gz) links stay hidden.
           curl -sf -X PATCH -H "Authorization: token $GITEA_TOKEN" -H "Content-Type: application/json" \
             "$API/repos/$REPO/releases/$RID" -d '{"hide_archive_links":true}' >/dev/null || true
-          # Upload every dist/*.zip
+          # Upload every dist/*.zip. Re-running for an existing tag 409s on
+          # duplicate asset names - warn and keep going instead of letting
+          # set -e kill the job; only fail if the release ends up with zero
+          # assets.
+          existing=$(curl -s -H "Authorization: token $GITEA_TOKEN" \
+            "$API/repos/$REPO/releases/$RID/assets" | jq -r '.[].name' || true)
+          uploaded=0
+          present=0
           for f in dist/*.zip; do
             name=$(basename "$f")
+            if printf '%s\n' "$existing" | grep -qxF "$name"; then
+              echo "::warning::$name already attached (re-run for existing tag) - skipping"
+              present=$((present+1))
+              continue
+            fi
             echo "uploading $name"
-            curl -sf -X POST -H "Authorization: token $GITEA_TOKEN" \
-              -F "attachment=@$f" \
-              "$API/repos/$REPO/releases/$RID/assets?name=$name" \
-              | jq -r '"  -> " + .browser_download_url'
+            if curl -sf -X POST -H "Authorization: token $GITEA_TOKEN" \
+                -F "attachment=@$f" \
+                "$API/repos/$REPO/releases/$RID/assets?name=$name" \
+                | jq -r '"  -> " + .browser_download_url'; then
+              uploaded=$((uploaded+1))
+            else
+              echo "::warning::upload failed for $name (duplicate asset on re-run?)"
+            fi
           done
+          echo "release published: $uploaded uploaded, $present already present"
+          # Only fail the job if NO assets ended up on the release.
+          [ "$((uploaded + present))" -gt 0 ]