fix(deploy): centralize approved workflow dispatch

examples/gitea-actions/forgeflow-approved-deploy.yml

@@ -3,6 +3,10 @@ name: ForgeFlow approved deploy
 on:
   workflow_dispatch:
     inputs:
+      repository:
+        description: Signed allowlisted deployment target (owner/repository)
+        required: true
+        type: string
       environment:
         description: Allowlisted ForgeFlow environment
         required: true
@@ -33,7 +37,7 @@ on:
         type: string
 
 concurrency:
-  group: forgeflow-approved-${{ gitea.repository }}-${{ inputs.environment }}
+  group: forgeflow-approved-${{ inputs.repository }}-${{ inputs.environment }}
   cancel-in-progress: false
 
 jobs:
@@ -43,7 +47,7 @@ jobs:
       - name: Validate signed deployment inputs
         shell: bash
         env:
-          FF_REPOSITORY: ${{ gitea.repository }}
+          FF_REPOSITORY: ${{ inputs.repository }}
           FF_ENVIRONMENT: ${{ inputs.environment }}
           FF_COMMIT_SHA: ${{ inputs.commit_sha }}
           FF_REQUEST_ID: ${{ inputs.request_id }}
@@ -65,7 +69,7 @@ jobs:
       - name: Execute root-owned verified deployment
         shell: bash
         env:
-          FF_REPOSITORY: ${{ gitea.repository }}
+          FF_REPOSITORY: ${{ inputs.repository }}
           FF_ENVIRONMENT: ${{ inputs.environment }}
           FF_COMMIT_SHA: ${{ inputs.commit_sha }}
           FF_REQUEST_ID: ${{ inputs.request_id }}