Add initial implementation of gitea-mcp-forward-auth microservice

- Create build and release workflows for CI/CD
- Implement Dockerfile for multi-stage builds
- Add core authentication logic with token validation
- Include HTTP handler for authorization checks
- Set up Kubernetes deployment and service manifests
- Update README with usage instructions and configuration details

deploy/k3s/deployment.yaml

@@ -0,0 +1,50 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: gitea-mcp-auth-proxy
+  labels:
+    app: gitea-mcp-auth-proxy
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: gitea-mcp-auth-proxy
+  template:
+    metadata:
+      labels:
+        app: gitea-mcp-auth-proxy
+    spec:
+      containers:
+        - name: auth-proxy
+          image: gitea.nehmer.net/torben/gitea-mcp-auth-proxy:latest
+          imagePullPolicy: IfNotPresent
+          ports:
+            - containerPort: 8080
+              name: http
+          env:
+            - name: AUTH_PROXY_LISTEN_ADDR
+              value: ":8080"
+            - name: AUTH_PROXY_TOKENS_DIR
+              value: /var/run/secrets/auth-proxy
+            - name: AUTH_PROXY_LOG_LEVEL
+              value: info
+          volumeMounts:
+            - name: auth-tokens
+              mountPath: /var/run/secrets/auth-proxy
+              readOnly: true
+          readinessProbe:
+            httpGet:
+              path: /healthz
+              port: http
+            initialDelaySeconds: 2
+            periodSeconds: 10
+          livenessProbe:
+            httpGet:
+              path: /healthz
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 15
+      volumes:
+        - name: auth-tokens
+          secret:
+            secretName: gitea-mcp-auth-proxy-tokens

deploy/k3s/service.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: gitea-mcp-auth-proxy
+  labels:
+    app: gitea-mcp-auth-proxy
+spec:
+  selector:
+    app: gitea-mcp-auth-proxy
+  ports:
+    - name: http
+      port: 80
+      targetPort: http
+      protocol: TCP
+  type: ClusterIP