fix: checkout with submodules false + manual auth

.gitea/workflows/release.yaml

@@ -17,11 +17,15 @@ jobs:
         goarch: [amd64, arm64]
     steps:
       - name: Checkout code
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        with:
+          submodules: false
+
+      - name: Update submodules with auth
         run: |
-          git config --global http.extraHeader "Authorization: Bearer ${{ gitea.token }}"
+          git config http.extraHeader "Authorization: Bearer ${{ gitea.token }}"
-          git pull origin ${{ gitea.ref_name }}
           git submodule update --init --recursive
-          ls -la app/  # Debug: verify submodule
+          ls -la app/  # Debug
 
       - name: Setup Go
         uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff
@@ -57,12 +61,16 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout code manually
+      - name: Checkout code
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        with:
+          submodules: false
+
+      - name: Update submodules with auth
         run: |
-          git config --global http.extraHeader "Authorization: Bearer ${{ gitea.token }}"
+          git config http.extraHeader "Authorization: Bearer ${{ gitea.token }}"
-          git pull origin ${{ gitea.ref_name }}
           git submodule update --init --recursive
-          ls -la app/  # Debug: verify submodule
+          ls -la app/  # Debug
 
       - name: Download all artifacts
         uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093