fix: address bot review findings

- Add codeberg.org to deriveLinkedIssueProvider built-in Gitea check
- Fix Gitea PR review prompt: !N → #N (GitLab vs Gitea syntax)
- Update gitlab.mdx: remove 'read-only' claim (write support ships)
- Gate walkthrough Gitea PR source (server can't fulfill yet)
- Thread per-project API base URL override into walkthrough GitLab diff
- Stop following cross-origin redirects in GitLab/Gitea clients (auth leak prevention)

packages/ui/src/components/views/walkthrough/WalkthroughView.tsx

@@ -265,10 +265,8 @@ export const WalkthroughView = ({ directory }: WalkthroughViewProps) => {
       const number = gitLabMr.mr?.number;
       return number ? { kind: 'pr', number } : null;
     }
-    if (gitProvider === 'gitea') {
-      const number = giteaPr.pr?.number;
-      return number ? { kind: 'pr', number } : null;
-    }
+    // Gitea PR diff is not yet supported server-side; omit the source to
+    // avoid offering a review that would fail with "no GitHub remote".
     return branchPrNumber ? { kind: 'pr', number: branchPrNumber } : null;
   }, [branchPrNumber, giteaPr.pr, gitLabMr.mr, gitProvider, source]);
 

packages/ui/src/lib/linkedIssues.ts

@@ -132,7 +132,7 @@ export const deriveLinkedIssueProvider = (url: string): ForgeProviderKind | null
 
   if (host === 'github.com') return 'github';
   if (host === 'gitlab.com') return 'gitlab';
-  if (host === 'gitea.com') return 'gitea';
+  if (host === 'gitea.com' || host === 'codeberg.org') return 'gitea';
 
   const { domains, apiBaseUrls } = useGitProviderDomainsStore.getState();
   const gitlabAccounts = useGitLabAuthStore.getState().status?.accounts;

packages/ui/src/lib/magicPrompts.ts

@@ -443,7 +443,7 @@ Do not implement changes until I confirm; end with: "Next actions: <1 sentence>"
     placeholders: [
       { key: 'pr_number', description: 'Pull request number.' },
     ],
-    template: 'Review this pull request !{{pr_number}} using the provided PR context',
+    template: 'Review this pull request #{{pr_number}} using the provided PR context',
   },
   {
     id: 'gitea.pr.review.instructions',