fix provision spawn, GiteaClient.create_issue, badge overwrite

- Add UV_PYTHON_PREFERENCE + uv sync to provision step so python
  resolves in the bookworm-slim image
- Add create_issue() to GiteaClient (was missing, broke vuln reporter)
- Add overwrite: true to S3 coverage badge upload

.woodpecker/ci.yml

@@ -79,6 +79,7 @@ steps:
       source: "coverage.svg"
       target: /badges/homelab/stack/
       path_style: true
+      overwrite: true
     depends_on:
       - test
 

.woodpecker/deploy.yml

@@ -285,10 +285,14 @@ steps:
       - /run/user/1000/docker.sock:/var/run/docker.sock
       - /home/kert/stack:/home/kert/stack
     environment:
+      UV_PYTHON_PREFERENCE: only-system
+      UV_LINK_MODE: copy
+      UV_PROJECT_ENVIRONMENT: .venv
       ROOT_KEY:
         from_secret: root_key
     commands:
       - cd /home/kert/stack
+      - uv sync --no-dev
       - uv run python -m api.auth provision ${CI_COMMIT_SHA}
     depends_on:
       - build-push-notebooks

src/api/clients/gitea/client.py

@@ -84,3 +84,8 @@ class GiteaClient(Client):
 
     def delete_token(self, username: str, token_id: int) -> None:
         self.delete(f"/users/{username}/tokens/{token_id}")
+
+    # ── Issues ───────────────────────────────────────────────
+
+    def create_issue(self, owner: str, repo: str, body: dict) -> dict:
+        return self.post(f"/repos/{owner}/{repo}/issues", json=body).json()