Fix pipeline: pnpm version source and registry login whitespace

pnpm/action-setup reads the version from package.json packageManager —
the explicit `version: 11` input made it fail on the mismatch. The
registry login now strips whitespace from the stored token before
docker login (the secret carried a trailing newline).

Part of #8

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

.gitea/workflows/cd.yml

@@ -22,7 +22,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Log in to the Gitea registry
-        run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login gitea.101010.cloud -u fable-5 --password-stdin
+        run: printf '%s' "${{ secrets.REGISTRY_TOKEN }}" | tr -d '[:space:]' | docker login gitea.101010.cloud -u fable-5 --password-stdin
 
       # Tags: the immutable SHA (promotion + rollback target) and the
       # moving `test` tag that the Test stage's compose file pulls.
@@ -68,8 +68,6 @@ jobs:
 
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 11
 
       - name: Set up Node.js
         uses: actions/setup-node@v4
@@ -101,7 +99,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Log in to the Gitea registry
-        run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login gitea.101010.cloud -u fable-5 --password-stdin
+        run: printf '%s' "${{ secrets.REGISTRY_TOKEN }}" | tr -d '[:space:]' | docker login gitea.101010.cloud -u fable-5 --password-stdin
 
       # Registry-side retag of the SHA images that just passed on Test —
       # Int always runs bit-identical images, never a rebuild.

.gitea/workflows/ci.yml

@@ -22,8 +22,6 @@ jobs:
 
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 11
 
       - name: Set up Node.js
         uses: actions/setup-node@v4