ci: make release workflow fully self-contained (no GitHub actions)

Replace actions/checkout + actions/setup-python (pulled from github.com by
default) with a manual git clone at the tag and the runner's system Python.

.gitea/workflows/release.yml

@@ -8,16 +8,20 @@ on:
 permissions:
   contents: write
 
+# Self-contained: no external (GitHub-hosted) actions. Runs on a self-hosted
+# Windows runner (label `windows`) that already has Python 3.12 on PATH.
 jobs:
   build:
     runs-on: windows
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout repository at tag
-
+        shell: pwsh
-      - name: Set up Python
+        env:
-        uses: actions/setup-python@v5
+          TOKEN: ${{ github.token }}
-        with:
+        run: |
-          python-version: '3.12'
+          $base = "${{ github.server_url }}" -replace '^https://', ''
+          $url  = "https://oauth2:$env:TOKEN@$base/${{ github.repository }}.git"
+          git clone --depth 1 --branch "$env:GITHUB_REF_NAME" $url .
 
       - name: Install build dependencies
         run: python -m pip install --upgrade pip pyinstaller rich