fix(renovate): githubTokenWarn is global-only — set it in the workflow env

fe94999 put githubTokenWarn in renovate.json. Renovate rejects
global-only options in a repository config ("Configuration Error"),
and run 1606 then extracted dependencies but opened no branches. It now
comes from RENOVATE_GITHUB_TOKEN_WARN in the workflow, and renovate.json
validates in repo mode (renovate-config-validator --strict from the repo
directory). I had validated with the file path as an argument, which
checks it as global config, where the option is legal.

.gitea/workflows/renovate.yml

@@ -31,6 +31,9 @@ jobs:
           RENOVATE_REPOSITORIES: homelab/stack
           RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
           RENOVATE_BINARY_SOURCE: global
+          # Global-only option (a repo renovate.json may not set it). The only
+          # github.com deps left are ones packageRules disable on purpose.
+          RENOVATE_GITHUB_TOKEN_WARN: "false"
           # Optional. Without it, github.com lookups (github-tags/-releases
           # pins) share the anonymous 60/h limit, which the -full image and
           # fetchChangeLogs=off keep this repo well under. Add the secret (a

renovate.json

@@ -8,7 +8,6 @@
   "prHourlyLimit": 0,
   "minimumReleaseAge": "7 days",
   "fetchChangeLogs": "off",
-  "githubTokenWarn": false,
   "ignorePaths": [
     "**/node_modules/**",
     "**/bower_components/**",