feat!: rebuild tea on Cobra with explicit noun/verb commands (#1126)

- **switch tea to the Cobra command tree:** `internal/app` wires the packages from parts 1–4 into explicit noun/verb commands with `--repo`, `--json` / `--jq`, `--sudo` and `--debug`; `main.go` points at it. Build, release and docs tooling (`tools/cli-docs`, Makefile, goreleaser, snap, CI) and README / CONTRIBUTING are updated.
- **remove the urfave/cli command tree:** deletes `cmd/`, `modules/`, the old integration tests, contrib completion scripts and the generated `docs/CLI.md`, and drops their dependencies. This commit only deletes.

## Breaking changes

This is a breaking release. It requires Gitea 28 or newer; configuration moves to separate `config.yml` and `hosts.yml` files and requires fresh authentication, and command names, aliases, flags and output formats change. `docs/migration-1.0.md` maps every old command, flag and environment variable to its replacement.

## Issues

fixes #1118
fixes #1116
fixes #1115
fixes #1094
fixes #1091
fixes #1073
fixes #1052
fixes #1032
fixes #1023
fixes #966
fixes #908
fixes #833
fixes #831
fixes #817
fixes #804
fixes #779
fixes #770
fixes #737
fixes #697
fixes #726
fixes #677
fixes #672
fixes #633
fixes #632
fixes #560
fixes #556
fixes #523
fixes #516
fixes #510
fixes #504
fixes #500
fixes #482
fixes #406
fixes #403
fixes #373
fixes #351
fixes #344
fixes #326
fixes #325
fixes #323
fixes #246
fixes #240
fixes #232
fixes #197
fixes #172
fixes #141
fixes #69
fixes #1110
fixes #569
fixes #480
fixes #666
fixes #670
fixes #457
fixes #643
fixes #498
fixes #490
fixes #1069
fixes #834
fixes #602
fixes #328
fixes #417
fixes #571
fixes #1029
fixes #489
fixes #1050
fixes #162
fixes #430
fixes #1087
fixes #683

Reviewed-on: https://gitea.com/gitea/tea/pulls/1126
Reviewed-by: TheFox0x7 <95654+thefox0x7@noreply.gitea.com>

internal/app/status_test.go

@@ -0,0 +1,77 @@
+// Copyright 2026 The Gitea Authors. All rights reserved.
+// SPDX-License-Identifier: MIT
+
+package app
+
+import (
+	"context"
+	"net/http"
+	"strings"
+	"testing"
+
+	"gitea.dev/tea/internal/clierr"
+	"github.com/stretchr/testify/require"
+)
+
+func TestStatusJSONAndActionsScope(t *testing.T) {
+	runs := 0
+	actionsEnabled := true
+	server := newAuthenticatedServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		switch {
+		case r.URL.Path == "/api/v1/repos/alice/project":
+			if actionsEnabled {
+				_, _ = w.Write([]byte(`{"has_actions":true}`))
+			} else {
+				_, _ = w.Write([]byte(`{"has_actions":false}`))
+			}
+		case strings.HasSuffix(r.URL.Path, "/actions/runs"):
+			runs++
+			require.Equal(t, "/api/v1/repos/alice/project/actions/runs", r.URL.Path)
+			require.Equal(t, []string{"failure", "timed_out"}, r.URL.Query()["status"])
+			_, _ = w.Write([]byte(`{"workflow_runs":[{"id":7,"display_title":"Broken build","status":"completed","conclusion":"failure"}]}`))
+		case strings.HasSuffix(r.URL.Path, "/issues") || strings.HasSuffix(r.URL.Path, "/search"):
+			_, _ = w.Write([]byte(`[]`))
+		default:
+			t.Fatalf("unexpected path %s", r.URL.Path)
+		}
+	}))
+	defer server.Close()
+	deps, out, diagnostics := serverDeps(t, server.URL)
+	require.NoError(t, Execute(context.Background(), deps, []string{"status", "-R", "alice/project", "--json=user,pull_requests,runs_included,failing_runs", "--jq", "{user, pull_requests, runs_included, run_ids: [.failing_runs[].id]}"}))
+	require.JSONEq(t, `{"user":"alice","pull_requests":{"authored":[],"assigned":[],"review_requested":[]},"runs_included":true,"run_ids":[7]}`, out.String())
+	require.Empty(t, diagnostics.String())
+	require.Equal(t, 1, runs)
+	actionsEnabled = false
+	for _, args := range [][]string{
+		{"status", "--json=runs_included,failing_runs"},
+		{"status", "-R", "alice/project", "--json=runs_included,failing_runs"},
+		{"status", "-R", "alice/project", "--runs=false", "--json=runs_included,failing_runs"},
+		{"pr", "status", "-R", "alice/project", "--json"},
+	} {
+		out.Reset()
+		require.NoError(t, Execute(context.Background(), deps, args))
+		if args[0] == "pr" {
+			require.JSONEq(t, `{"authored":[],"assigned":[],"review_requested":[]}`, out.String())
+		} else {
+			require.JSONEq(t, `{"runs_included":false,"failing_runs":[]}`, out.String())
+		}
+		require.Equal(t, 1, runs)
+	}
+}
+
+func TestStatusFailureDoesNotPublishPartialJSON(t *testing.T) {
+	server := newAuthenticatedServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.URL.Query().Get("created") == "true" {
+			_, _ = w.Write([]byte(`[{"id":1,"number":1,"title":"Authored PR","repository":{"full_name":"alice/project"}}]`))
+			return
+		}
+		w.WriteHeader(http.StatusForbidden)
+	}))
+	defer server.Close()
+	deps, out, diagnostics := serverDeps(t, server.URL)
+	err := Execute(context.Background(), deps, []string{"pr", "status", "--json"})
+	require.Error(t, err)
+	require.Equal(t, clierr.Failure, clierr.ExitCode(err))
+	require.Empty(t, out.String())
+	require.Empty(t, diagnostics.String())
+}