Add a vendor step that uses gitea_token to fetch private modules from gitea.develooper.com, then subsequent steps use the vendored dependencies without needing credentials.
Replace .drone.yml with .woodpecker.yaml and update scripts/run-goreleaser to use CI_COMMIT_TAG instead of DRONE_TAG.