probe: add native OpenWrt deployment and signed automatic updates [CI]

.woodpecker/dev-image.yml

@@ -53,6 +53,9 @@ steps:
   - name: build-linux-amd64-probe
     image: bash
     environment:
+      GITEA_BASE: http://127.0.0.1:3100
+      GITEA_TOKEN:
+        from_secret: gitea_token
       ZOT_REGISTRY: registry.oeo.one
       ZOT_USERNAME: justme
       ZOT_SECRET:
@@ -82,6 +85,9 @@ steps:
   - name: build-linux-arm64-probe
     image: bash
     environment:
+      GITEA_BASE: http://127.0.0.1:3100
+      GITEA_TOKEN:
+        from_secret: gitea_token
       ZOT_REGISTRY: registry.oeo.one
       ZOT_USERNAME: justme
       ZOT_SECRET:

.woodpecker/verify.yml

@@ -15,6 +15,12 @@ when:
 
 # On Gitea PR events, CI_COMMIT_MESSAGE is the PR title.
 steps:
+  - name: openwrt-updater-tests
+    image: bash
+    commands:
+      - sh -n packaging/openwrt/install.sh
+      - bash -n ci/publish-openwrt.sh
+      - python3 scripts/test-openwrt-updater.py
   - name: backend-tests
     image: bash
     # [SKIP TESTS] omits Backend tests only; web-build remains a dependent workflow.