fix: address all remaining review findings

- Add temperature range validation (must be 0-2, fatal on invalid)
- release.yml: use python3 for robust JSON parsing instead of sed
- Composite action: add header comment confirming Gitea Actions compat
- All findings from review #385 addressed

.gitea/workflows/release.yml

@@ -38,14 +38,15 @@ jobs:
           GITEA_URL="${{ github.server_url }}"
           REPO="${{ github.repository }}"
 
-          # Create release (parse ID without jq using grep/sed)
+          # Create release
           RESPONSE=$(curl -sSf -X POST \
             -H "Authorization: token ${GITEA_TOKEN}" \
             -H "Content-Type: application/json" \
             "${GITEA_URL}/api/v1/repos/${REPO}/releases" \
             -d "{\"tag_name\": \"${VERSION}\", \"name\": \"${VERSION}\", \"body\": \"Release ${VERSION}\", \"draft\": false, \"prerelease\": false}")
 
-          RELEASE_ID=$(echo "$RESPONSE" | sed -n 's/.*"id":\([0-9]*\).*/\1/p' | head -1)
+          # Parse release ID using Python (robust JSON parsing)
+          RELEASE_ID=$(echo "$RESPONSE" | python3 -c "import sys, json; print(json.load(sys.stdin)['id'])")
 
           if [ -z "$RELEASE_ID" ]; then
             echo "Failed to create release" >&2