Support instances that serve SSH from another hostname

Discovery matched a git remote's host against the instance URL's host, so
a server answering SSH on a different name than its web UI resolved to
nothing — and said so only in a debug log.

Resolution now runs in three stages. A remote host is matched directly,
then against configured aliases, and failing both the instances are asked
for the repository: Gitea publishes its SSH hostname in a repository's
ssh_url, so the right instance identifies itself. What that turns up is
saved as a host alias, so later repositories on the same host resolve
with no lookup at all, and the mapping is visible and editable rather
than hidden. Each unknown host is probed at most once per session.

When nothing resolves the sidebar now names the unmatched host and offers
Add Host Alias, instead of showing an empty section.

Aliases can also be written by hand as "remote-host = instance URL",
accepting =, -> and =>, ignoring ports, and skipping # comments. List
preferences now merge workspace entries onto global ones rather than
letting an empty global array mask them.

Adds Tests/host-aliases.test.js covering both directions: unmatched hosts
reported and nothing persisted, a hand-written alias, detection from
ssh_url, and a later repository resolving from the stored alias without a
probe. 131 checks across three suites.

Also adds CLAUDE.md, and .gitea/workflows/ci.yml running the suites,
script syntax checks, manifest validation, and a generated-image check.
Tools/make-icons.py gains --check, which compares decompressed pixels so
a differing zlib version cannot fail it spuriously.

Co-Authored-By: Claude Opus 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01MQuusXgZC2dzwpJJ1qhtti

Scripts/gitea/remotes.js

@@ -57,11 +57,22 @@ function parse(url) {
     return null;
 }
 
-/** The host of an instance base URL, for matching against a remote's host. */
-function hostOf(baseUrl) {
-    const match = String(baseUrl || "").match(/^[a-z][a-z0-9+.-]*:\/\/([^/]+)/i);
-    if (!match) return null;
-    return stripCredentials(match[1]).replace(/:\d+$/, "").toLowerCase();
+/**
+ * The bare host of an instance base URL, a remote URL, or a plain hostname,
+ * without scheme, credentials, port, or path. Used to compare a remote against
+ * a configured instance and to normalise both sides of a host alias.
+ */
+function hostOf(value) {
+    const text = String(value || "").trim();
+    if (!text) return null;
+
+    const scheme = text.match(/^[a-z][a-z0-9+.-]*:\/\/([^/]+)/i);
+    // Without a scheme this is already a bare host, possibly carrying
+    // credentials, a port, or an SCP-style path after a colon.
+    const authority = scheme ? scheme[1] : text.replace(/[/:].*$/, "");
+
+    const host = stripCredentials(authority).replace(/:\d+$/, "").toLowerCase();
+    return host || null;
 }
 
 exports.parse = parse;