ci(gitea): don't fail pipeline on npm audit, npmmirror.com lacks the advisories endpoint

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

.gitea/workflows/qa.yml

@@ -22,6 +22,14 @@ jobs:
           node-version: 22
       - run: npm ci
       - name: Audit dependencies (retry service errors only)
+        # npmmirror.com (see NPM_CONFIG_REGISTRY above) doesn't implement
+        # npm's bulk security-advisories endpoint, so this always reports
+        # "audit endpoint returned an error" here even though installs
+        # work fine. The real audit still runs on GitHub-hosted runners
+        # against registry.npmjs.org (.github/workflows/qa.yml), so don't
+        # fail the whole Gitea pipeline over a check this runner can't
+        # physically perform.
+        continue-on-error: true
         timeout-minutes: 4
         shell: bash
         run: |