fix: resolve CI gitleaks download and missing pymumble dep

- Dynamically resolve latest gitleaks version from GitHub releases
  instead of hardcoded tarball URL that 404'd
- Add pymumble to test job install (needed by derp.mumble import
  chain, not in pyproject.toml base deps)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.gitea/workflows/ci.yml

@@ -14,7 +14,8 @@ jobs:
           fetch-depth: 0
       - name: Install gitleaks
         run: |
-          curl -sSL https://github.com/gitleaks/gitleaks/releases/latest/download/gitleaks_8.24.3_linux_x64.tar.gz \
+          VERSION=$(curl -sI https://github.com/gitleaks/gitleaks/releases/latest | grep -i '^location:' | grep -oP 'v[\d.]+')
+          curl -sSL "https://github.com/gitleaks/gitleaks/releases/download/${VERSION}/gitleaks_${VERSION#v}_linux_x64.tar.gz" \
             | tar xz -C /usr/local/bin gitleaks
       - name: Scan for secrets
         run: gitleaks detect --source . --verbose
@@ -40,7 +41,7 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
-      - run: pip install -e . && pip install pytest
+      - run: pip install -e . && pip install pymumble pytest
       - run: pytest -v
 
   build: