The automatic Actions token (GITEA_TOKEN) returns 401 against the packages content API in this Gitea version, and GITEA_/GITHUB_- prefixed names are reserved for secrets anyway. Switch to a dedicated write:package-scoped token stored as PKG_REGISTRY_TOKEN. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018n5ffHCn5QUjpDtuWTk3fh