ci: simplify workflows for Forgejo self-hosted runner
- Rewrite ci.yml: replace TMT with direct go test/lint/build commands,
remove E2E jobs (need docker compose infra, run locally instead)
- Replace third-party actions with CLI equivalents:
gitleaks-action → gitleaks CLI, trivy-action → trivy CLI,
actions-rust-lang/audit → cargo audit, CodeQL → disabled
- Disable 18 non-essential workflows (cloud services, DinD, staging):
chromatic, cd, container-scan, zap-dast, visual-regression,
mutation-testing, performance, load-test, etc.
- Keep 8 core workflows: ci, backend-ci, frontend-ci, rust-ci,
stream-ci, security-scan, trivy-fs, go-fuzz
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>