Review upstream basic auth bug fix

[pedrogaudencio]

Problem

Gitea fixed a basic auth bug in v1.26.2.

Basic auth can be used by Git clients and API consumers. If Forkana has the same issue, Git-over-HTTP or API authentication behavior may be incorrect or unsafe.

Upstream fix:

• Fix basic auth bug go-gitea/gitea#37503

Solution

Review the upstream fix and determine whether Forkana is affected.

Address the following:

• Check whether Forkana uses the affected basic auth code path.
• Compare Forkana’s auth handling with the upstream patch.
• Backport the fix if applicable.
• Test Git-over-HTTP and API basic auth behavior.
• Confirm invalid credentials are rejected and valid credentials still work.