gitea: pin to 1.27.3 (CVE-2026-60004, CVE-2026-20896, CVE-2026-27771)

The floating gitea/gitea:1 tag with IfNotPresent pull policy left the
node on a cached 1.26.1 image. Pin the version and let Renovate track it.

gitea/gitea-deployment.yaml

@@ -20,7 +20,7 @@ spec:
         fsGroup: 1000
       containers:
         - name: gitea
-          image: gitea/gitea:1
+          image: gitea/gitea:1.27.3
           env:
             - name: USER_UID
               value: "1000"

renovate.json

@@ -17,7 +17,8 @@
     "managerFilePatterns": [
       "/apps/templates/.+\\.yaml$/",
       "/serpbear/.+\\.yaml$/",
-      "/bolletjestrui/.+\\.yaml$/"
+      "/bolletjestrui/.+\\.yaml$/",
+      "/gitea/.+\\.yaml$/"
     ]
   },
   "customManagers": [