Fork pull requests and runner trust: what Gitea's Actions approval fixes change

How Gitea's Actions approval fixes change the trust boundary for fork pull requests, including CVE-2026-103670, affected versions and hardening steps.