fix: send a team's permission before its units (Gitea 28), hidden private-org team reviews, long non-ASCII repo descriptions, -R NAME vs directory guard, flake fallback

Signed-off-by: bircni <bircni@icloud.com>

flake.nix

@@ -15,7 +15,8 @@
         devShells.default = pkgs.mkShell {
           name = "tea-dev-environment";
           buildInputs = with pkgs; [
-            go_1_27
+            # flake.lock may pin a nixpkgs that predates Go 1.27; go.mod's toolchain line then fetches it.
+            (pkgs.go_1_27 or pkgs.go)
             gopls
             gnumake
             # Add other dependencies here if needed