♻️ refactor(ci): 将 GIT_CONFIG 环境变量改为内联 -c 认证

- 删除三个 workflow env 段的 GIT_CONFIG_COUNT/KEY/VALUE 变量
- 在需要认证的 git 命令上内联 -c credential.helper/interactive
- prepare fetch、stats 两处 push、release push 各自内联
- 保留 ACCESS_TOKEN，helper 运行时取用

.gitea/workflows/changelog_and_release.yml

@@ -30,13 +30,6 @@ env:
   #    - GIT_TOKEN: 用于 git push
   #    - API_TOKEN: 用于 API 调用
   ACCESS_TOKEN: ${{ secrets.WORKFLOW }}
-  GIT_CONFIG_COUNT: "3"
-  GIT_CONFIG_KEY_0: "credential.helper"
-  GIT_CONFIG_VALUE_0: ""
-  GIT_CONFIG_KEY_1: "credential.helper"
-  GIT_CONFIG_VALUE_1: '!f() { test "$1" = get || exit 0; printf "%s\n" username=oauth2; printf "%s\n" "password=${ACCESS_TOKEN}"; }; f'
-  GIT_CONFIG_KEY_2: "credential.interactive"
-  GIT_CONFIG_VALUE_2: "never"
 
   # ===== 工作区配置 =====
   WORKSPACE_ROOT: "/data/workspace"
@@ -906,7 +899,10 @@ jobs:
             git commit -m "${{ env.COMMIT_MSG }}"
 
             echo "📤 推送到远程 ${{ env.MAIN_BRANCH }} 分支..."
-            if git -C "${{ env.REPO_DIR }}" push origin "${{ env.MAIN_BRANCH }}"; then
+            if git -c credential.helper= \
+                   -c 'credential.helper=!f() { test "$1" = get || exit 0; printf "%s\n" username=oauth2; printf "%s\n" "password=${ACCESS_TOKEN}"; }; f' \
+                   -c credential.interactive=never \
+                   -C "${{ env.REPO_DIR }}" push origin "${{ env.MAIN_BRANCH }}"; then
               echo "✅ 推送成功"
             else
               echo "❌ 推送失败"