fix: gitleaks clone depth and opuslib discovery on musl

Remove invalid --depth=0 from gitleaks checkout (needs full history).
Add opus symlink and pymumble/opuslib patch step to test jobs so
ctypes.find_library works on Alpine/musl.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.gitea/workflows/ci.yml

@@ -18,7 +18,7 @@ jobs:
       - name: Checkout
         run: |
           apk add --no-cache git
-          git clone --depth=0 "$REPO_URL" .
+          git clone "$REPO_URL" .
           git checkout "${{ github.sha }}"
       - name: Scan for secrets
         run: gitleaks detect --source . --verbose
@@ -53,9 +53,13 @@ jobs:
           git clone --depth=1 "$REPO_URL" .
           git checkout "${{ github.sha }}"
       - name: Install system deps
-        run: apk add --no-cache opus-dev
+        run: |
+          apk add --no-cache opus opus-dev
+          ln -sf /usr/lib/libopus.so.0 /usr/lib/libopus.so
       - name: Install Python deps
         run: pip install -q -r requirements-dev.txt
+      - name: Patch pymumble/opuslib for musl
+        run: python3 patches/apply_pymumble_ssl.py
       - name: Test
         run: pytest -v