fix: add GIT_SSL_NO_VERIFY for Cloudflare origin cert in CI

The runner containers don't trust the Cloudflare origin certificate
for git.lethalbits.com, causing checkout to fail. Set GIT_SSL_NO_VERIFY
and Go private module env vars at the workflow level for all workflows.

.gitea/workflows/release-nightly.yml

@@ -4,6 +4,12 @@ on:
   push:
     branches: [main]
 
+env:
+  GIT_SSL_NO_VERIFY: true
+  GOPRIVATE: git.lethalbits.com/*
+  GONOSUMCHECK: git.lethalbits.com/*
+  GOINSECURE: git.lethalbits.com/*
+
 jobs:
   publish-nightly:
     runs-on: ubuntu-latest

.gitea/workflows/release-tag.yml

@@ -4,6 +4,12 @@ on:
   push:
     tags: ["*"]
 
+env:
+  GIT_SSL_NO_VERIFY: true
+  GOPRIVATE: git.lethalbits.com/*
+  GONOSUMCHECK: git.lethalbits.com/*
+  GOINSECURE: git.lethalbits.com/*
+
 jobs:
   goreleaser:
     runs-on: ubuntu-latest

.gitea/workflows/test-pr.yml

@@ -3,6 +3,12 @@ name: check-and-test
 on:
   - pull_request
 
+env:
+  GIT_SSL_NO_VERIFY: true
+  GOPRIVATE: git.lethalbits.com/*
+  GONOSUMCHECK: git.lethalbits.com/*
+  GOINSECURE: git.lethalbits.com/*
+
 jobs:
   check-and-test:
     runs-on: ubuntu-latest