time: every write but comments and statuses goes out as the time bot

Gitea 1.24 also refuses the Actions identity label edits (removing a label is a 500), which crashed
promote_next and stalled the queue. gh() now uses TIME_TOKEN for every write except comments (Time's
beats are gitea-actions' comments) and commit statuses; the time user never counts as trusted and
mention replies ignore it; astra.yml gets TIME_TOKEN.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017fTCFiw6ohysUDcWoPsTys

.github/workflows/astra.yml

@@ -24,6 +24,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+          TIME_TOKEN: ${{ secrets.TIME_TOKEN }}   # repo secret: Astra's issues and labels go out as the `time` bot
           VENICE_API_KEY: ${{ secrets.VENICE_API_KEY }}
           TIME_ASTRA_SEAT: ${{ vars.TIME_ASTRA_SEAT }}
           TIME_ASTRA_MAX_READY: ${{ vars.TIME_ASTRA_MAX_READY }}

.github/workflows/mention.yml

@@ -19,7 +19,8 @@ jobs:
     # author_association in the event.
     if: >-
       contains(github.event.comment.body || github.event.issue.body, '@') &&
-      (github.event.comment.user.login || github.event.issue.user.login) != 'gitea-actions'
+      (github.event.comment.user.login || github.event.issue.user.login) != 'gitea-actions' &&
+      (github.event.comment.user.login || github.event.issue.user.login) != 'time'
     runs-on: ubuntu-latest
     timeout-minutes: 8
     steps: