fix: make gitleaks job tolerant of GitHub network failures

Gitea CI runner can't reliably reach github.com (TCP reset from 20.205.243.166).
Make gitleaks job non-blocking with continue-on-error and graceful fallback
when GitHub is unreachable.

.gitea/workflows/test.yml

@@ -17,12 +17,18 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+        continue-on-error: true
 
       - name: Run gitleaks
         run: |
-          # Install gitleaks and run directly (avoid Docker-in-Docker bind mount issues)
-          curl -sL https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz | tar xz
-          ./gitleaks detect --source . --no-git --verbose 2>&1 || echo "gitleaks check complete (non-blocking)"
+          # Try to run gitleaks; GitHub may be unreachable from the runner
+          if curl -fsSL --connect-timeout 10 "https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz" -o gitleaks.tar.gz 2>/dev/null; then
+            tar xzf gitleaks.tar.gz
+            ./gitleaks detect --source . --no-git --verbose 2>&1 || echo "gitleaks found issues (non-blocking)"
+          else
+            echo "⚠️  Skipping gitleaks — GitHub unreachable from CI runner"
+          fi
+        continue-on-error: true
 
   backend-tests:
     name: Backend Tests