Gitea: Try create release again

.gitea/workflows/build_and_test.yml

@@ -148,19 +148,22 @@ jobs:
         with:
           lfs: false
           fetch-depth: 0
-      - name: Configure LFS auth for gitea.psi.ch
+      - name: Configure auth and fetch LFS
         shell: bash
         env:
           GITEA_TOKEN: ${{ secrets.PIP_REPOSITORY_API_TOKEN }}
         run: |
-          umask 077
-          cat > ~/.netrc <<EOF
-          machine gitea.psi.ch
-            login __token__
-            password ${GITEA_TOKEN}
-          EOF
+          set -euo pipefail
+
+          # Add Basic Authorization header for gitea.psi.ch
+          BASIC_AUTH="$(printf "__token__:%s" "${GITEA_TOKEN}" | base64 -w0 2>/dev/null || printf "__token__:%s" "${GITEA_TOKEN}" | base64)"
+          git config http.https://gitea.psi.ch/.extraheader "Authorization: Basic ${BASIC_AUTH}"
+
+          # Initialize and fetch LFS with credentials
           git lfs install --local
-          git lfs fetch origin "$(git rev-parse --abbrev-ref HEAD || echo HEAD)"
+          # Fetch only the current ref to reduce surface; fallback to all if needed
+          CURRENT_REF="$(git rev-parse --abbrev-ref HEAD || echo HEAD)"
+          git lfs fetch origin "${CURRENT_REF}" || git lfs fetch --all
           git lfs checkout
       - name: Create release
         env: