gitea -- multiple issues

The Gitea team reports:

Test if container blob is accessible before mounting.

[source]

Set type="password" on all auth_token fields

Seen when migrating from other hosting platforms.

Prevents exposing the token to screen capture/cameras/eyeballs.

Prevents the browser from saving the value in its autocomplete dictionary, which often is not secure.

[source]