Validate visible rendered provenance

Authored-By: Codex (GPT-5) <noreply@openai.com>

action.yaml

@@ -29,6 +29,12 @@ inputs:
   pr-body:
     description: PR description — github.event.pull_request.body.
     required: true
+  server-url:
+    description: Gitea server URL — github.server_url.
+    required: true
+  token:
+    description: Gitea Actions token — github.token.
+    required: true
   base-sha:
     description: Base commit SHA — github.event.pull_request.base.sha.
     required: true
@@ -46,6 +52,8 @@ runs:
         PR_TITLE: ${{ inputs.pr-title }}
         PR_AUTHOR: ${{ inputs.pr-author }}
         PR_BODY: ${{ inputs.pr-body }}
+        GITEA_SERVER_URL: ${{ inputs.server-url }}
+        GITEA_TOKEN: ${{ inputs.token }}
         BASE_SHA: ${{ inputs.base-sha }}
         HEAD_SHA: ${{ inputs.head-sha }}
       run: bash "${{ github.action_path }}/check.sh"