Gitea's GITHUB_TOKEN is read-only for packages (issue #23642). Switch to PACKAGES_TOKEN Personal Access Token with write:package scope. Setup required: 1. Gitea → User Settings → Applications → Generate Token (read:package, write:package) 2. Repo → Settings → Actions → Secrets → PACKAGES_TOKEN