Scan public repositories through Gitea API

.env.example

@@ -5,3 +5,8 @@ TRACE_RECEIPT_TOKENS=goonk:replace-with-a-long-random-token
 # Optional: comma-separated id:absolute-path pairs for deliberately mounted
 # read-only repository mirrors. Leave empty when production has no Git repos.
 TRACE_REPOS=
+# Production-friendly candidate scanning through the Gitea API. Public
+# repositories need no token; add a read-only token only for private repos.
+TRACE_GITEA_URL=https://repo.explewd.com
+TRACE_GITEA_REPOS=explewd/flit
+TRACE_GITEA_TOKEN=