feat: add safe Gitea sync and signed updates

src/main/unraid-inventory-methods.cjs

@@ -431,7 +431,7 @@ function createUnraidInventoryMethods({
         const plan = this.reconciliationPlan(server, workloads, repositories, { autoLink: true });
         if (plan.additions.length) await this.store.createRecoverySnapshot?.(`automatic-server-links-${serverId}`);
         const linkedRepositories = new Set(workloads
-          .filter((workload) => workload.link?.repositoryFullName)
+          .filter((workload) => workload.classification?.type !== "stale-link" && workload.link?.repositoryFullName)
           .map((workload) => String(workload.link.repositoryFullName).toLowerCase()));
         for (const addition of plan.additions) {
           const workload = workloads.find((item) => item.workloadId === addition.workloadId);
@@ -466,7 +466,9 @@ function createUnraidInventoryMethods({
     reconciliationPlan(server, workloads, repositories, { autoLink = true } = {}) {
       const profiles = this.allSshProfiles().filter((profile) => profile.serverId === server.id);
       const activeWorkloadIds = new Set(workloads.filter((item) => item.classification?.type !== "stale-link").map((item) => item.workloadId));
-      const linkedRepositories = new Set(workloads.filter((item) => item.link?.repositoryFullName).map((item) => String(item.link.repositoryFullName).toLowerCase()));
+      const linkedRepositories = new Set(workloads
+        .filter((item) => item.classification?.type !== "stale-link" && item.link?.repositoryFullName)
+        .map((item) => String(item.link.repositoryFullName).toLowerCase()));
       const additions = [];
       const updates = [];
       const conflicts = [];