The built-in gitea.token is automatically available in Gitea Actions without needing a repo secret configured.