ci: use Gitea API for tag creation instead of git push

Fixes tag step failing due to branch protection on main rejecting
the runner's git push. Creates tags via REST API which bypasses
branch protection. Also removes the unnecessary VERSION file commit.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.gitea/workflows/docker-build.yml

@@ -87,17 +87,16 @@ jobs:
           cache-from: type=registry,ref=manticorum67/paper-dynasty-discordapp:buildcache
           cache-to: type=registry,ref=manticorum67/paper-dynasty-discordapp:buildcache,mode=max
 
-      # Create git tag and update VERSION file on successful push
+      # Create git tag via Gitea API (avoids branch protection issues)
       - name: Tag release
         if: success() && github.ref == 'refs/heads/main'
         run: |
-          git config user.name "Gitea Actions"
-          git config user.email "actions@git.manticorum.com"
-          echo "${{ steps.meta.outputs.version }}" > VERSION
-          git add VERSION
-          git commit -m "chore: bump version to ${{ steps.meta.outputs.version }} [skip ci]" || true
-          git tag "${{ steps.meta.outputs.version }}"
-          git push origin main --tags
+          curl -s -X POST \
+            -H "Authorization: token ${{ github.token }}" \
+            -H "Content-Type: application/json" \
+            -d "{\"tag_name\": \"${{ steps.meta.outputs.version }}\", \"target\": \"${{ github.sha }}\", \"name\": \"${{ steps.meta.outputs.version }}\"}" \
+            "${{ github.server_url }}/api/v1/repos/${{ github.repository }}/tags"
+          echo "Created tag ${{ steps.meta.outputs.version }}"
 
       - name: Build Summary
         run: |