Relax Renovate token preflight and fix E2E frontend mount

.gitea/workflows/cicd.yaml

@@ -2382,7 +2382,7 @@ jobs:
             -e PLAYWRIGHT_BASE_URL="http://frontend:80" \
             -e PLAYWRIGHT_OUTPUT_DIR=/tmp/playwright-artifacts \
             -e PLAYWRIGHT_JUNIT_OUTPUT_FILE=/tmp/playwright-artifacts/playwright-results.xml \
-            -v "${E2E_REPO_DIR}/frontend:/workspace/frontend" \
+            -v "${E2E_REPO_DIR}:/workspace" \
             -v "${ARTIFACT_DIR}:/tmp/playwright-artifacts" \
             "${E2E_TESTER_DIGEST_REF}" \
             bash -lc 'set -euo pipefail; retry_cmd(){ attempts="${1:-5}"; backoff="${2:-3}"; shift 2; attempt=1; while [ "${attempt}" -le "${attempts}" ]; do if "$@"; then return 0; fi; if [ "${attempt}" -lt "${attempts}" ]; then sleep_seconds=$((backoff * attempt)); echo "Retrying in ${sleep_seconds}s"; sleep "${sleep_seconds}"; fi; attempt=$((attempt + 1)); done; return 1; }; cd /workspace/frontend; if [ ! -f package.json ]; then echo "❌ Missing package.json in /workspace/frontend"; ls -la /workspace/frontend; exit 1; fi; retry_cmd 5 4 corepack yarn install --immutable; corepack yarn test:e2e --reporter=list --timeout=90000' \

.gitea/workflows/renovate.yml

@@ -206,7 +206,10 @@ jobs:
                 -H "Authorization: token ${candidate_value}" \
                 "${API_ENDPOINT}/orgs/${TARGET_ORG}" || true)
 
-              if [ "${USER_STATUS}" = "200" ] && [ "${REPO_STATUS}" = "200" ] && [ "${ORG_STATUS}" = "200" ]; then
+              if [ "${REPO_STATUS}" = "200" ]; then
+                if [ "${USER_STATUS}" != "200" ] || [ "${ORG_STATUS}" != "200" ]; then
+                  echo "⚠ Token candidate ${candidate_name} has repo access but limited user/org scopes (user=${USER_STATUS}, repo=${REPO_STATUS}, org=${ORG_STATUS})"
+                fi
                 echo "${candidate_name}:${candidate_value}"
                 return 0
               fi
@@ -219,7 +222,7 @@ jobs:
 
           if ! SELECTED_TOKEN_RESULT="$(select_token_with_repo_access)"; then
             echo "❌ No token available for Renovate authentication with repository access"
-            echo "Configure RENOVATE_TOKEN with repo+issue write and organization/user read scopes."
+            echo "Configure RENOVATE_TOKEN with at least repository read/write access; user/org read scopes are optional for this workflow."
             echo "Token preflight checks attempted: ${API_ENDPOINT}/user, ${API_ENDPOINT}/repos/${TARGET_REPO}, and ${API_ENDPOINT}/orgs/${TARGET_ORG}"
             if [ -s /tmp/renovate-auth-check-user.json ]; then
               echo "Last user endpoint response body:"